yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Misc fixes

Browse Source
This commit is contained in:
vcerenu
2022-04-05 17:18:51 -03:00
parent 4defd499d4
commit 119eddd220
7 changed files with 14 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build-docker-images/wazuh-dashboard/Dockerfile
+1 -8
View File
@@ -79,14 +79,7 @@ ENV PATTERN="" \
WAZUH_MONITORING_FREQUENCY="" \ WAZUH_MONITORING_FREQUENCY="" \
WAZUH_MONITORING_SHARDS="" \ WAZUH_MONITORING_SHARDS="" \
WAZUH_MONITORING_REPLICAS="" \ WAZUH_MONITORING_REPLICAS="" \
ADMIN_PRIVILEGES="" \ ADMIN_PRIVILEGES=""
XPACK_CANVAS="true" \
XPACK_LOGS="true" \
XPACK_INFRA="true" \
XPACK_ML="true" \
XPACK_DEVTOOLS="true" \
XPACK_MONITORING="true" \
XPACK_APM="true"
# Create wazuh-dashboard user and group # Create wazuh-dashboard user and group
RUN getent group $GROUP || groupadd -r -g 1000 $GROUP RUN getent group $GROUP || groupadd -r -g 1000 $GROUP
build-docker-images/wazuh-dashboard/config/wazuh.yml
-6
View File
@@ -77,12 +77,6 @@
# List of index patterns to be ignored # List of index patterns to be ignored
#ip.ignore: [] #ip.ignore: []
# #
# -------------------------------- X-Pack RBAC ---------------------------------
#
# Custom setting to enable/disable built-in X-Pack RBAC security capabilities.
# Default: enabled
#xpack.rbac.enabled: true
#
# ------------------------------ wazuh-monitoring ------------------------------ # ------------------------------ wazuh-monitoring ------------------------------
# #
# Custom setting to enable/disable wazuh-monitoring indices. # Custom setting to enable/disable wazuh-monitoring indices.
build-docker-images/wazuh-indexer/config/roles_mapping.yml
+2 -2
View File
@@ -1,6 +1,6 @@
--- ---
# In this file users, backendroles and hosts can be mapped to Open Distro Security roles. # In this file users, backendroles and hosts can be mapped to Wazuh indexer Security roles.
# Permissions for Opendistro roles are configured in roles.yml # Permissions for Wazuh indexer roles are configured in roles.yml
_meta: _meta:
type: "rolesmapping" type: "rolesmapping"
multi-node/config/wazuh_indexer/wazuh1.indexer.yml
+2 -2
View File
@@ -36,6 +36,6 @@ plugins.security.restapi.roles_enabled:
- "security_rest_api_access" - "security_rest_api_access"
plugins.security.allow_default_init_securityindex: true plugins.security.allow_default_init_securityindex: true
cluster.routing.allocation.disk.threshold_enabled: false cluster.routing.allocation.disk.threshold_enabled: false
opendistro_security.audit.config.disabled_rest_categories: NONE plugins.security.audit.config.disabled_rest_categories: NONE
opendistro_security.audit.config.disabled_transport_categories: NONE plugins.security.audit.config.disabled_transport_categories: NONE
compatibility.override_main_response_version: true compatibility.override_main_response_version: true
multi-node/config/wazuh_indexer/wazuh2.indexer.yml
+2 -2
View File
@@ -36,6 +36,6 @@ plugins.security.restapi.roles_enabled:
- "security_rest_api_access" - "security_rest_api_access"
plugins.security.allow_default_init_securityindex: true plugins.security.allow_default_init_securityindex: true
cluster.routing.allocation.disk.threshold_enabled: false cluster.routing.allocation.disk.threshold_enabled: false
opendistro_security.audit.config.disabled_rest_categories: NONE plugins.security.audit.config.disabled_rest_categories: NONE
opendistro_security.audit.config.disabled_transport_categories: NONE plugins.security.audit.config.disabled_transport_categories: NONE
compatibility.override_main_response_version: true compatibility.override_main_response_version: true
multi-node/config/wazuh_indexer/wazuh3.indexer.yml
+2 -2
View File
@@ -36,6 +36,6 @@ plugins.security.restapi.roles_enabled:
- "security_rest_api_access" - "security_rest_api_access"
plugins.security.allow_default_init_securityindex: true plugins.security.allow_default_init_securityindex: true
cluster.routing.allocation.disk.threshold_enabled: false cluster.routing.allocation.disk.threshold_enabled: false
opendistro_security.audit.config.disabled_rest_categories: NONE plugins.security.audit.config.disabled_rest_categories: NONE
opendistro_security.audit.config.disabled_transport_categories: NONE plugins.security.audit.config.disabled_transport_categories: NONE
compatibility.override_main_response_version: true compatibility.override_main_response_version: true
single-node/config/wazuh_indexer/wazuh.indexer.yml
+5 -1
View File
@@ -3,7 +3,6 @@ node.name: "wazuh.indexer"
path.data: /var/lib/wazuh-indexer path.data: /var/lib/wazuh-indexer
path.logs: /var/log/wazuh-indexer path.logs: /var/log/wazuh-indexer
discovery.type: single-node discovery.type: single-node
compatibility.override_main_response_version: true
plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/wazuh.indexer.pem plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/wazuh.indexer.pem
plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/wazuh.indexer.key plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/wazuh.indexer.key
plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/root-ca.pem plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/root-ca.pem
@@ -25,3 +24,8 @@ plugins.security.restapi.roles_enabled:
- "security_rest_api_access" - "security_rest_api_access"
plugins.security.system_indices.enabled: true plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"] plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opensearch-observability", ".opendistro-asynchronous-search-response*", ".replication-metadata-store"]
plugins.security.allow_default_init_securityindex: true
cluster.routing.allocation.disk.threshold_enabled: false
plugins.security.audit.config.disabled_rest_categories: NONE
plugins.security.audit.config.disabled_transport_categories: NONE
compatibility.override_main_response_version: true