ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Kibana Wazuh - No login page option

    Scheduled Pinned Locked Moved IT Discussion
    wazuhwazuh-mangerhttpd
    14 Posts 4 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403
      last edited by

      Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

      @IRJ

      IRJI 1 Reply Last reply Reply Quote 0
      • IRJI
        IRJ @DustinB3403
        last edited by

        @DustinB3403 said in Kibana Wazuh - No login page option:

        Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

        @IRJ

        https://documentation.wazuh.com/3.10/installation-guide/installing-elastic-stack/protect-installation/index.html

        travisdh1T 1 Reply Last reply Reply Quote 0
        • travisdh1T
          travisdh1 @IRJ
          last edited by

          @IRJ said in Kibana Wazuh - No login page option:

          @DustinB3403 said in Kibana Wazuh - No login page option:

          Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

          @IRJ

          https://documentation.wazuh.com/3.10/installation-guide/installing-elastic-stack/protect-installation/index.html

          I've never understood why this is not part of the default installation.

          IRJI 1 Reply Last reply Reply Quote 0
          • IRJI
            IRJ @travisdh1
            last edited by

            @travisdh1 said in Kibana Wazuh - No login page option:

            @IRJ said in Kibana Wazuh - No login page option:

            @DustinB3403 said in Kibana Wazuh - No login page option:

            Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.

            @IRJ

            https://documentation.wazuh.com/3.10/installation-guide/installing-elastic-stack/protect-installation/index.html

            I've never understood why this is not part of the default installation.

            Because elastic makes a ton of money selling a security solutions for ELK

            1 Reply Last reply Reply Quote 0
            • DustinB3403D
              DustinB3403
              last edited by

              So just reading over this it looks like I need to follow this piece specifically.

              1 Reply Last reply Reply Quote 0
              • DustinB3403D
                DustinB3403
                last edited by

                Yeah so going through that entire process using the plugin versions that matches just causes kibana to crash repeatedly and never actually start.

                1 Reply Last reply Reply Quote 0
                • DustinB3403D
                  DustinB3403
                  last edited by

                  Might've found the issue.

                  1 Reply Last reply Reply Quote 0
                  • black3dynamiteB
                    black3dynamite
                    last edited by

                    What about just using nginx has an authentication?

                    https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

                    https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

                    DustinB3403D IRJI 2 Replies Last reply Reply Quote 0
                    • DustinB3403D
                      DustinB3403
                      last edited by

                      Some progress, but my Kibana page just keeps sitting at "Kibana is not ready yet"

                      1 Reply Last reply Reply Quote 0
                      • DustinB3403D
                        DustinB3403 @black3dynamite
                        last edited by

                        @black3dynamite said in Kibana Wazuh - No login page option:

                        What about just using nginx has an authentication?

                        https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

                        https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

                        I really wasn't planning on digging into nginx with this.

                        1 Reply Last reply Reply Quote 0
                        • DustinB3403D
                          DustinB3403
                          last edited by DustinB3403

                          Got it!

                          Had to edit the url in /etc/kibana/kibana.yml to be https for the elasticsearch url.

                          It's working now.

                          1 Reply Last reply Reply Quote 0
                          • IRJI
                            IRJ @black3dynamite
                            last edited by

                            @black3dynamite said in Kibana Wazuh - No login page option:

                            What about just using nginx has an authentication?

                            https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

                            https://www.digitalocean.com/community/tutorials/how-to-set-up-password-authentication-with-nginx-on-ubuntu-14-04

                            That is just for authentication to kibana, it doesnt actually protect API requests

                            1 Reply Last reply Reply Quote 0
                            • DustinB3403D
                              DustinB3403
                              last edited by

                              Now to figure out how to change the flipping username and password because admin:admin ain't secure. . .

                              1 Reply Last reply Reply Quote 0
                              • DustinB3403D
                                DustinB3403
                                last edited by

                                This is how you change the password.

                                1 Reply Last reply Reply Quote 0
                                • 1 / 1
                                • First post
                                  Last post