steps

backup: /etc/filebeat/certs/ /etc/wazuh-indexer/certs/ /var/ossec/etc/ossec.conf /var/ossec/etc/client.keys /var/ossec/queue/rids/sender_counter /var/ossec/etc/shared/default/agent.conf

---