mirror of
https://github.com/valitydev/wazuh-kibana-app.git
synced 2024-11-08 18:53:52 +00:00
220 lines
13 KiB
HTML
220 lines
13 KiB
HTML
<md-content flex ng-controller="settingsController" layout="column">
|
|
|
|
<md-content class="wazuhMenuNavBar" ng-init="menuNavItem = 'settings'" style="height: 70px;">
|
|
<menu-top></menu-top>
|
|
</md-content>
|
|
|
|
<md-content class="headBar" layout="row" layout-align="center start">
|
|
<md-nav-bar flex style="padding-right: 0px;" md-selected-nav-item="submenuNavItem" nav-bar-aria-label="navigation submenu">
|
|
<md-nav-item md-nav-click="submenuNavItem = 'api'" name="api">API</md-nav-item>
|
|
<md-nav-item md-nav-click="submenuNavItem = 'extensions'" name="extensions">Extensions</md-nav-item>
|
|
<md-nav-item md-nav-click="submenuNavItem = 'pattern'" name="pattern">Pattern</md-nav-item>
|
|
<md-nav-item md-nav-click="submenuNavItem = 'about'" name="about">About</md-nav-item>
|
|
</md-nav-bar>
|
|
</md-content>
|
|
|
|
<div layout="column" layout-align="start stretch">
|
|
|
|
<md-card layout-padding layout-align="start stretch" ng-if="submenuNavItem == 'api' && apiEntries.length == 0">
|
|
|
|
<h1 class="wazuh-h1">Welcome to the Wazuh App for Kibana 6</h1>
|
|
<div>
|
|
<p>The Wazuh App brings together a new and useful web interface for managing and monitoring your Wazuh infrastructure. You can check agent status, alert evolution, most recent events, popular alerts, top alert groups, etc. You can also display configuration and logs of the manager.</p>
|
|
<p>In addition, make use of any or all of these extensions:</p>
|
|
<ul>
|
|
<li>Linux Audit system integration.
|
|
<li>PCI DSS Compliance.
|
|
<li>OpenSCAP security compliance and vulnerability assessments.
|
|
</ul>
|
|
<p>The app joins Wazuh features like: <strong>Log management and analysis</strong>, <strong>file integrity monitoring</strong>, <strong>intrusion and anomaly detection</strong> and <strong>policy and compliance monitoring.</strong></p>
|
|
<p>Help us to improve this app. We would appreciate your feedback. Collaborate with us on the <a href="https://groups.google.com/forum/#!forum/wazuh">Mailing Lists</a> and/or the Wazuh App <a href="https://github.com/wazuh/wazuh-kibana-app">Github repository</a></p>
|
|
<br>
|
|
<p>Please enter your Wazuh RESTful API credentials at the form below to begin.</p>
|
|
</div>
|
|
|
|
</md-card>
|
|
<md-card layout-padding layout-align="start stretch" ng-if="apiIsDown === 'down'">
|
|
<h1 class="wazuh-h1"><i class="fa fa-warning ng-scope" aria-hidden="true" style="font-size: 25px;"></i> Wazuh RESTful API seems to be down</h1>
|
|
<p>Please, check if Wazuh RESTful API is running with one of the commands bellow:</p>
|
|
<md-list>
|
|
<md-list-item>For Systemd:</md-list-item>
|
|
<md-list-item><code> $ systemctl status wazuh-api</code></md-list-item>
|
|
<md-list-item>For SysV Init:</md-list-item>
|
|
<md-list-item><code> $ service wazuh-api status</code></md-list-item>
|
|
</md-list>
|
|
<p>If the API is <code>active (running)</code> please check its configuration below.</p>
|
|
</md-card>
|
|
<md-card layout-padding layout-align="start stretch" ng-if="apiEntries.length != 0 && currentDefault === undefined">
|
|
<h1 class="wazuh-h1"><i class="fa fa-warning ng-scope" aria-hidden="true" style="font-size: 25px;"></i> Please select an API from the list as default</h1>
|
|
<p>The Wazuh app needs an API connection for it to work. Please click the API's star (<i class="fa fa-star" aria-hidden="true" style="font-size: 18px;"></i>) icon of your choice to select that one.</p>
|
|
</md-card>
|
|
|
|
<md-card layout-padding layout-align="start stretch" ng-if="submenuNavItem == 'api'">
|
|
|
|
<h1 class="wazuh-h1"><i class="fa fa-cog ng-scope" aria-hidden="true" style="font-size: 25px;"></i> Wazuh App: API configuration</h1>
|
|
|
|
<span layout="row" layout-align="start start">
|
|
<p flex="15" style="font-weight: bold;">Cluster</p>
|
|
<p flex="20" style="font-weight: bold;">Manager</p>
|
|
<p flex="15" style="font-weight: bold;">API URL</p>
|
|
<p flex="15" style="font-weight: bold;">API Port</p>
|
|
<p flex="15" style="font-weight: bold;">User</p>
|
|
<p flex="20" style="font-weight: bold;">Actions</p>
|
|
|
|
|
|
</span>
|
|
|
|
<div ng-repeat="entry in apiEntries">
|
|
<span layout="row" layout-align="space-between center">
|
|
<p flex="15" ><i ng-show="(entry._id === currentDefault)" tooltip="Set as default Manager" class="fa fa-star" aria-hidden="true" style="color: #f39c12; font-size: 18px;"></i> {{entry._source.cluster_info.cluster}}</p>
|
|
<p flex="20" >{{entry._source.cluster_info.manager}}</p>
|
|
<p flex="15" >{{entry._source.url}}</p>
|
|
<p flex="15" >{{entry._source.api_port}}</p>
|
|
<p flex="15" >{{entry._source.api_user}}</p>
|
|
<p flex="20" >
|
|
<i ng-click="setDefault(entry)" tooltip="Set as default Manager" class="fa fa-star" aria-hidden="true" style="font-size: 18px;"></i>
|
|
<i ng-click="removeManager(entry)" tooltip="Remove manager" class="fa fa-trash" aria-hidden="true" style="margin-left: 7px;font-size: 18px;"></i>
|
|
<i ng-click="checkManager(entry)" tooltip="Check connection" class="fa fa-refresh" aria-hidden="true" style="margin-left: 7px;font-size: 18px;"></i>
|
|
</p>
|
|
</span>
|
|
|
|
<md-divider></md-divider>
|
|
</div>
|
|
|
|
<div layout="row" layout-align="center center">
|
|
<md-button flex="15" ng-click="$parent.addManagerContainer = !$parent.addManagerContainer" type="submit" class="buttonBlueLightSettings md-raised md-primary"><i class="fa fa-plus-circle" aria-hidden="true" style="font-size: 15px;"></i> Add new API</md-button>
|
|
</div>
|
|
|
|
<form flex ng-submit="processForm()" layout="column" layout-align="start stretch" ng-show="$parent.addManagerContainer || apiEntries.length == 0" style="margin-top: 30px; ">
|
|
<md-input-container>
|
|
<label>Username</label>
|
|
<input placeholder="" type="text" ng-model="formData.user" aria-label="username" required/>
|
|
</md-input-container>
|
|
<md-input-container>
|
|
<label>Password</label>
|
|
<input placeholder="" type="password" ng-model="formData.password" aria-label="password" required/>
|
|
</md-input-container>
|
|
<md-input-container>
|
|
<label>URL</label>
|
|
<input placeholder="https://" ng-model="formData.url" type="url" aria-label="full url" required/>
|
|
</md-input-container>
|
|
<md-input-container>
|
|
<label>Port</label>
|
|
<input placeholder="" ng-model="formData.port" type="text" aria-label="port" required/>
|
|
</md-input-container>
|
|
<div layout="row" layout-align="center center">
|
|
<p style="color: #ff9999">{{messageError}}</p>
|
|
</div>
|
|
<div layout="row" layout-align="center center">
|
|
<md-button flex="15" type="submit" class="buttonBlueLightSettings md-raised md-primary"><i class="fa fa-plus-circle" aria-hidden="true" style="font-size: 13px; margin-right: 5px; "></i>SAVE</md-button>
|
|
</div>
|
|
</form>
|
|
|
|
</md-card>
|
|
|
|
<md-card flex layout-padding layout-align="start stretch" ng-if="submenuNavItem == 'extensions'">
|
|
|
|
<h1 class="wazuh-h1"><i class="fa fa-cog ng-scope" aria-hidden="true" style="font-size: 25px;"></i> Wazuh App: Extensions</h1>
|
|
|
|
<p flex>Enable or disable extensions according to your needs. The extension includes: Panels and Discover, for Overview / Agents tabs.</p>
|
|
|
|
<div>
|
|
<span layout="row" layout-align="space-between center" style="font-weight: bold">
|
|
PCI DSS
|
|
</span>
|
|
<span>
|
|
The Payment Card Industry Data Security Standard (PCI DSS) is a proprietary information security standard for organizations that handle branded credit cards from the major card schemes including Visa, MasterCard, American Express, Discover, and JCB. The PCI Standard is mandated by the card brands and administered by the Payment Card Industry Security Standards Council. The standard was created to increase controls around cardholder data to reduce credit card fraud.
|
|
</span>
|
|
<span>
|
|
<md-switch flex ng-model="extensions.pci" aria-label="extensionsPci" ng-change="toggleExtension('pci',extensions.pci)"></md-switch>
|
|
</span>
|
|
<md-divider></md-divider>
|
|
</div>
|
|
|
|
<div>
|
|
<span layout="row" layout-align="space-between center" style="font-weight: bold">
|
|
OpenSCAP
|
|
</span>
|
|
<span>
|
|
OVAL (Open Vulnerability Assessment Language) interpreter used to check system configuration and detect vulnerable applications. It is recognized as a standardized compliance and hardening checking solution for enterprise-level infrastructure.
|
|
</span>
|
|
<span>
|
|
<md-switch flex ng-model="extensions.oscap" aria-label="extensionsOscap" ng-change="toggleExtension('oscap',extensions.oscap)"></md-switch>
|
|
</span>
|
|
<md-divider></md-divider>
|
|
</div>
|
|
|
|
<div>
|
|
<span layout="row" layout-align="space-between center" style="font-weight: bold">
|
|
Audit
|
|
</span>
|
|
<span>
|
|
The Linux Audit system provides a way to track security-relevant information on your system. Based on pre-configured rules, Audit generates log entries to record as much information about the events that are happening on your system as possible.
|
|
</span>
|
|
<span layout="row" layout-align="space-between center">
|
|
<md-switch flex ng-model="extensions.audit" aria-label="extensionsAudit" ng-change="toggleExtension('audit',extensions.audit)"></md-switch>
|
|
</span>
|
|
</div>
|
|
|
|
</md-card>
|
|
|
|
<md-card flex layout-padding layout-align="start stretch" ng-if="submenuNavItem == 'pattern'">
|
|
|
|
<h1 class="wazuh-h1"><i class="fa fa-cog ng-scope" aria-hidden="true" style="font-size: 25px;"></i> Wazuh App: Index pattern selection</h1>
|
|
|
|
<p flex>Select the index pattern to run search and analytics against:</p>
|
|
<p flex><strong>Beware: the new index-pattern structure must be compatible with Wazuh alerts, otherwise the visualizations will load erroneous data, or no data at all.</strong></p>
|
|
|
|
<md-input-container flex="20" class="md-whiteframe-z1 manager-ruleset-decoders-selector settings-background-e2" ng-if="load === false">
|
|
<md-select ng-model="selectedIndexPattern" ng-change="changeIndexPattern(selectedIndexPattern)" aria-label="Select index pattern">
|
|
<md-option ng-repeat="indexPattern in indexPatterns.list" value="{{indexPattern.id}}">{{indexPattern.attributes.title}}</md-option>
|
|
</md-select>
|
|
</md-input-container>
|
|
|
|
</md-card>
|
|
|
|
<md-content layout="column" layout-align="start stretch" ng-if="submenuNavItem == 'about'">
|
|
|
|
<md-card layout-align="start stretch">
|
|
<md-card-content>
|
|
<h1 class="wazuh-h1">About</h1>
|
|
<div>
|
|
<p>The Wazuh App brings together a new and useful web interface for managing and monitoring your Wazuh infrastructure. You can check agent status, alert evolution, most recent events, popular alerts, top alert groups, etc. You can also display configuration and logs of the manager.</p>
|
|
<p>In addition, make use of any or all of these extensions:</p>
|
|
<ul>
|
|
<li>Linux Audit system integration.
|
|
<li>PCI DSS Compliance.
|
|
<li>OpenSCAP security compliance and vulnerability assessments.
|
|
</ul>
|
|
<p>The app joins Wazuh features like: <strong>Log management and analysis</strong>, <strong>file integrity monitoring</strong>, <strong>intrusion and anomaly detection</strong> and <strong>policy and compliance monitoring.</strong></p>
|
|
<p>Help us to improve this app. We would appreciate your feedback. Collaborate with us on the <a href="https://groups.google.com/forum/#!forum/wazuh">Mailing Lists</a> and/or the Wazuh App <a href="https://github.com/wazuh/wazuh-kibana-app">Github repository</a></p>
|
|
</div>
|
|
</md-card-content>
|
|
</md-card>
|
|
|
|
|
|
<md-card layout-align="start stretch">
|
|
<md-card-content style="width: 500px;">
|
|
<h1 class="wazuh-h1">Version</h1>
|
|
<span layout="row" layout-align="space-between center">
|
|
<p>App version</p>
|
|
<p>{{appInfo["app-version"]}}</p>
|
|
</span>
|
|
<md-divider></md-divider>
|
|
<span layout="row" layout-align="space-between center">
|
|
<p>Install date</p>
|
|
<p>{{appInfo["installationDate"]}}</p>
|
|
</span>
|
|
<md-divider></md-divider>
|
|
<span layout="row" layout-align="space-between center">
|
|
<p>Revision</p>
|
|
<p>{{appInfo["revision"]}}</p>
|
|
</span>
|
|
|
|
</md-card-content>
|
|
</md-card>
|
|
</md-content>
|
|
</div>
|
|
|
|
</md-content>
|