public | ||
server | ||
util | ||
.eslintrc.json | ||
.gitignore | ||
.travis.yml | ||
CHANGELOG.md | ||
config.yml | ||
index.js | ||
init.js | ||
LICENSE | ||
package.json | ||
README.md |
Wazuh Kibana App
Wazuh is a security detection, visibility, and compliance open source project. It was born as a fork of OSSEC HIDS, later was integrated with Elastic Stack and OpenSCAP evolving into a more comprehensive solution. You can read more in https://wazuh.com/
App Description
Visualize and analyze Wazuh alerts stored in Elasticsearch using our Kibana app plugin.
-
Obtain statistics per agent, search alerts and filter by using the different visualizations.
-
View the Wazuh manager configuration.
-
File integrity monitoring.
Documentation
Requisites
- Wazuh HIDS 3.0.0 or superior
- Wazuh RESTful API 3.0.0 or superior
- Kibana 6.0.0 or superior
- Elasticsearch 6.0.0 or superior
Installation
Kibana version | Wazuh App version | Installation |
---|---|---|
6.0.0 | 3.0.0 | /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.0.0_6.0.0.zip |
6.0.1 | 3.0.0 | /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.0.0_6.0.1.zip |
6.1.0 | 3.0.0 | /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.0.0_6.1.0.zip |
6.1.0 | 3.1.0 | /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.1.0_6.1.0.zip |
6.1.1 | 3.1.0 | /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.1.0_6.1.1.zip |
6.1.2 | 3.1.0 | /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.1.0_6.1.2.zip |
Upgrade
Remove the App using kibana-plugin tool
/usr/share/kibana/bin/kibana-plugin remove wazuh
Install the App
/usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.x.x_6.x.x.zip
Contribute
If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list, by sending an email to wazuh+subscribe@googlegroups.com, to ask questions and participate in discussions.
Software and libraries used
- API from Elastic and Kibana (elastic.co).
- Angular Material (material.angularjs.org).
- Bootstrap (getbootstrap.com).
- AngularJS.
- Node.js (Ryan Dahl).
- NPM packages Angular animate, aria, cookies, md5, needle and cron.
License and copyright
Wazuh App Copyright (C) 2017 Wazuh Inc. (License GPLv2)