ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Kibana Wazuh - No login page option

    Scheduled Pinned Locked Moved IT Discussion
    wazuhwazuh-mangerhttpd
    14 Posts 4 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • IRJI
      IRJ @travisdh1
      last edited by

      @travisdh1 said in Kibana Wazuh - No login page option:

      @IRJ said in Kibana Wazuh - No login page option:

      @DustinB3403 said in Kibana Wazuh - No login page option:

      Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

      @IRJ

      https://documentation.wazuh.com/3.10/installation-guide/installing-elastic-stack/protect-installation/index.html

      I've never understood why this is not part of the default installation.

      Because elastic makes a ton of money selling a security solutions for ELK

      1 Reply Last reply Reply Quote 0
      • DustinB3403D
        DustinB3403
        last edited by

        So just reading over this it looks like I need to follow this piece specifically.

        1 Reply Last reply Reply Quote 0
        • DustinB3403D
          DustinB3403
          last edited by

          Yeah so going through that entire process using the plugin versions that matches just causes kibana to crash repeatedly and never actually start.

          1 Reply Last reply Reply Quote 0
          • DustinB3403D
            DustinB3403
            last edited by

            Might've found the issue.

            1 Reply Last reply Reply Quote 0
            • black3dynamiteB
              black3dynamite
              last edited by

              What about just using nginx has an authentication?

              https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

              https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

              DustinB3403D IRJI 2 Replies Last reply Reply Quote 0
              • DustinB3403D
                DustinB3403
                last edited by

                Some progress, but my Kibana page just keeps sitting at "Kibana is not ready yet"

                1 Reply Last reply Reply Quote 0
                • DustinB3403D
                  DustinB3403 @black3dynamite
                  last edited by

                  @black3dynamite said in Kibana Wazuh - No login page option:

                  What about just using nginx has an authentication?

                  https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

                  https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

                  I really wasn't planning on digging into nginx with this.

                  1 Reply Last reply Reply Quote 0
                  • DustinB3403D
                    DustinB3403
                    last edited by DustinB3403

                    Got it!

                    Had to edit the url in /etc/kibana/kibana.yml to be https for the elasticsearch url.

                    It's working now.

                    1 Reply Last reply Reply Quote 0
                    • IRJI
                      IRJ @black3dynamite
                      last edited by

                      @black3dynamite said in Kibana Wazuh - No login page option:

                      What about just using nginx has an authentication?

                      https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

                      https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

                      That is just for authentication to kibana, it doesnt actually protect API requests

                      1 Reply Last reply Reply Quote 0
                      • DustinB3403D
                        DustinB3403
                        last edited by

                        Now to figure out how to change the flipping username and password because admin:admin ain't secure. . .

                        1 Reply Last reply Reply Quote 0
                        • DustinB3403D
                          DustinB3403
                          last edited by

                          This is how you change the password.

                          1 Reply Last reply Reply Quote 0
                          • 1 / 1
                          • First post
                            Last post