Wazuh - Kibana plugin
Go to file
2017-01-23 05:14:59 -08:00
node_modules Index pattern API fix. Setting manager name fix 2017-01-12 09:54:49 -08:00
public Audit extension. Extensions selector 2017-01-23 05:14:59 -08:00
server Included Auditd Dashboard. Fixed warn pattern fields 2017-01-23 03:43:12 -08:00
index.js Design. View tabs, added icons 2016-12-22 19:54:57 +00:00
init.js Wazuh elastic: refactoring 2016-09-29 12:52:43 +00:00
LICENSE Initial commit 2016-06-28 19:30:19 -07:00
package.json Cleaning controllers. Arranging files. Rename files 2017-01-13 03:02:27 -08:00
README.md Update App download URL. 2017-01-18 14:06:11 +01:00

Wazuh - Kibana App

Requisites

  • Wazuh HIDS 2.0 or superior
  • Wazuh RESTful API 2.0 or superior
  • Kibana 5 or superior
  • Elasticsearch 5 or superior

Installation

/usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp.zip

Upgrading

/usr/share/kibana/bin/kibana-plugin remove wazuh

/usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp.zip

Wazuh Open Source modules and contributions

  • OSSEC Wazuh Ruleset: Includes compliance mapping with PCI DSS v3.1, CIS and additional decoders and rules. Users can contribute to this rule set by submitting pull requests to our Github repository. Our team will continue to maintain and update it periodically.

  • Wazuh fork with extended JSON logging capabilities, for easy integration with ELK Stack and third party log management tools. The manager also include modifications in OSSEC binaries needed by the OSSEC Wazuh RESTful API.

  • Wazuh RESTful API: Used to monitor and control your OSSEC installation, providing an interface to interact with the manager from anything that can send an HTTP request.

  • Pre-compiled installation packages, both for OSSEC agent and manager: Include repositories for RedHat, CentOS, Fedora, Debian, Ubuntu and Windows.

  • Puppet scripts for automatic OSSEC deployment and configuration.

  • Docker containers to virtualize and run your OSSEC manager and an all-in-one integration with ELK Stack.

Documentation

Branches

  • stable branch on correspond to the last stable version.
  • master branch contains the latest code, be aware of possible bugs on this branch.
  • development branch includes all the new features we're adding and testing.

Contribute

If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list, by sending an email to wazuh+subscribe@googlegroups.com, to ask questions and participate in discussions.

Software and libraries used

  • API from Elastic and Kibana (elastic.co).
  • Angular Material (material.angularjs.org).
  • Bootstrap (getbootstrap.com).
  • AngularJS.
  • Node.js (Ryan Dahl).
  • NPM packages Angular animate, aria, cookies, md5, needle and cron.

Wazuh App Copyright (C) 2016 Wazuh Inc. (License GPLv2)

References