wazuh-kibana-app/README.md
2017-12-22 14:04:32 -05:00

3.1 KiB

Wazuh Kibana App

Slack Email Documentation Documentation

Wazuh is a security detection, visibility, and compliance open source project. It was born as a fork of OSSEC HIDS, later was integrated with Elastic Stack and OpenSCAP evolving into a more comprehensive solution. You can read more in https://wazuh.com/

App Description

Visualize and analyze Wazuh alerts stored in Elasticsearch using our Kibana app plugin.

  • Obtain statistics per agent, search alerts and filter by using the different visualizations.

  • View the Wazuh manager configuration.

  • File integrity monitoring.

Documentation

Overview

Requisites

  • Wazuh HIDS 3.0.0 or superior
  • Wazuh RESTful API 3.0.0 or superior
  • Kibana 6.0.0 or superior
  • Elasticsearch 6.0.0 or superior

Installation

Kibana version Wazuh App version Installation
6.0.0 3.0.0 /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.0.0_6.0.0.zip
6.0.1 3.0.0 /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.0.0_6.0.1.zip
6.1.0 3.0.0 /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.0.0_6.1.0.zip
6.1.0 3.1.0 /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.1.0_6.1.0.zip

Upgrade

Remove the App using kibana-plugin tool

/usr/share/kibana/bin/kibana-plugin remove wazuh

Install the App

/usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.x.x_6.x.x.zip

Contribute

If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list, by sending an email to wazuh+subscribe@googlegroups.com, to ask questions and participate in discussions.

Software and libraries used

  • API from Elastic and Kibana (elastic.co).
  • Angular Material (material.angularjs.org).
  • Bootstrap (getbootstrap.com).
  • AngularJS.
  • Node.js (Ryan Dahl).
  • NPM packages Angular animate, aria, cookies, md5, needle and cron.

Wazuh App Copyright (C) 2017 Wazuh Inc. (License GPLv2)

References