forked from wazuh/wazuh-docker
Ordening code, disable xpack ml feature at elastic. Also the features disabled at kibana are modified
This commit is contained in:
@@ -7,6 +7,8 @@ ENV ALERTS_SHARDS="1" \
|
|||||||
ENV API_USER="foo" \
|
ENV API_USER="foo" \
|
||||||
API_PASS="bar"
|
API_PASS="bar"
|
||||||
|
|
||||||
|
ENV XPACK_ML="false"
|
||||||
|
|
||||||
ENV TEMPLATE_VERSION=v3.8.2
|
ENV TEMPLATE_VERSION=v3.8.2
|
||||||
|
|
||||||
ADD https://raw.githubusercontent.com/wazuh/wazuh/$TEMPLATE_VERSION/extensions/elasticsearch/wazuh-elastic6-template-alerts.json /usr/share/elasticsearch/config
|
ADD https://raw.githubusercontent.com/wazuh/wazuh/$TEMPLATE_VERSION/extensions/elasticsearch/wazuh-elastic6-template-alerts.json /usr/share/elasticsearch/config
|
||||||
|
|||||||
@@ -68,4 +68,25 @@ curl -XPUT "$el_url/_cluster/settings" -H 'Content-Type: application/json' -d'
|
|||||||
}
|
}
|
||||||
'
|
'
|
||||||
|
|
||||||
|
#Disabling xpack features
|
||||||
|
|
||||||
|
elasticsearch_config_file="/usr/share/elasticsearch/config/elasticsearch.yml"
|
||||||
|
if grep -Fq "#xpack features" "$elasticsearch_config_file";
|
||||||
|
then
|
||||||
|
declare -A CONFIG_MAP=(
|
||||||
|
[xpack.ml.enabled]=$XPACK_ML
|
||||||
|
)
|
||||||
|
for i in "${!CONFIG_MAP[@]}"
|
||||||
|
do
|
||||||
|
if [ "${CONFIG_MAP[$i]}" != "" ]; then
|
||||||
|
sed -i 's/.'"$i"'.*/'"$i"': '"${CONFIG_MAP[$i]}"'/' $elasticsearch_config_file
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
else
|
||||||
|
echo "
|
||||||
|
#xpack features
|
||||||
|
xpack.ml.enabled: $XPACK_ML
|
||||||
|
" >> $elasticsearch_config_file
|
||||||
|
fi
|
||||||
|
|
||||||
echo "Elasticsearch is ready."
|
echo "Elasticsearch is ready."
|
||||||
|
|||||||
+11
-1
@@ -39,7 +39,13 @@ ENV PATTERN="" \
|
|||||||
WAZUH_MONITORING_FREQUENCY="" \
|
WAZUH_MONITORING_FREQUENCY="" \
|
||||||
WAZUH_MONITORING_SHARDS="" \
|
WAZUH_MONITORING_SHARDS="" \
|
||||||
WAZUH_MONITORING_REPLICAS="" \
|
WAZUH_MONITORING_REPLICAS="" \
|
||||||
ADMIN_PRIVILEGES=""
|
ADMIN_PRIVILEGES=""\
|
||||||
|
XPACK_CANVAS="false"\
|
||||||
|
XPACK_LOGS="false"\
|
||||||
|
XPACK_INFRA="false"\
|
||||||
|
XPACK_ML="false"\
|
||||||
|
XPACK_DEVTOOLS="false"\
|
||||||
|
XPACK_APM="false"
|
||||||
|
|
||||||
|
|
||||||
COPY --chown=kibana:kibana ./config/wazuh_app_config.sh ./
|
COPY --chown=kibana:kibana ./config/wazuh_app_config.sh ./
|
||||||
@@ -50,5 +56,9 @@ COPY --chown=kibana:kibana ./config/kibana_settings.sh ./
|
|||||||
|
|
||||||
RUN chmod +x ./kibana_settings.sh
|
RUN chmod +x ./kibana_settings.sh
|
||||||
|
|
||||||
|
COPY --chown=kibana:kibana ./config/xpack_config.sh ./
|
||||||
|
|
||||||
|
RUN chmod +x ./xpack_config.sh
|
||||||
|
|
||||||
ENTRYPOINT /entrypoint.sh
|
ENTRYPOINT /entrypoint.sh
|
||||||
|
|
||||||
|
|||||||
@@ -47,48 +47,4 @@ sleep 5
|
|||||||
# Do not ask user to help providing usage statistics to Elastic
|
# Do not ask user to help providing usage statistics to Elastic
|
||||||
curl -POST "http://kibana:5601/api/telemetry/v1/optIn" -H "Content-Type: application/json" -H "kbn-xsrf: true" -d '{"enabled":false}'
|
curl -POST "http://kibana:5601/api/telemetry/v1/optIn" -H "Content-Type: application/json" -H "kbn-xsrf: true" -d '{"enabled":false}'
|
||||||
|
|
||||||
|
|
||||||
kibana_config_file="/usr/share/kibana/plugins/wazuh/config.yml"
|
|
||||||
if grep -vq "#xpack features" "$kibana_config_file";
|
|
||||||
then
|
|
||||||
|
|
||||||
echo "
|
|
||||||
#xpack features
|
|
||||||
xpack.apm.ui.enabled: false
|
|
||||||
xpack.grokdebugger.enabled: false
|
|
||||||
xpack.searchprofiler.enabled: false
|
|
||||||
xpack.security.enabled: false
|
|
||||||
xpack.graph.enabled: false
|
|
||||||
xpack.ml.enabled: false
|
|
||||||
xpack.monitoring.enabled: false
|
|
||||||
xpack.reporting.enabled: false
|
|
||||||
xpack.watcher.enabled: false
|
|
||||||
" >> /usr/share/kibana/config/kibana.yml
|
|
||||||
|
|
||||||
else
|
|
||||||
|
|
||||||
|
|
||||||
declare -A CONFIG_MAP=(
|
|
||||||
|
|
||||||
[xpack.apm.ui.enabled]= $XPACK_APM
|
|
||||||
[xpack.grokdebugger.enabled]= $XPACK_DEVTOOLS
|
|
||||||
[xpack.searchprofiler.enabled]= $XPACK_DEVTOOLS
|
|
||||||
[xpack.security.enable]= $XPACK_SECURITY
|
|
||||||
[xpack.graph.enabled]= $XPACK_GRAPHS
|
|
||||||
[xpack.ml.enabled]=$XPACK_MACHINELEARNING
|
|
||||||
[xpack.monitoring.enabled]= $XPACK_MONITORING
|
|
||||||
[xpack.reporting.enable]= $XPACK_REPORTING
|
|
||||||
[xpack.watcher.enabled]= $XPACK_WATCHER
|
|
||||||
)
|
|
||||||
|
|
||||||
for i in "${!CONFIG_MAP[@]}"
|
|
||||||
do
|
|
||||||
if [ "${CONFIG_MAP[$i]}" != "" ]; then
|
|
||||||
sed -i 's/.*'"$i"'.*/'"$i"': '"${CONFIG_MAP[$i]}"'/' $kibana_config_file
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
|
|
||||||
fi
|
|
||||||
|
|
||||||
|
|
||||||
echo "End settings"
|
echo "End settings"
|
||||||
|
|||||||
@@ -0,0 +1,33 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
kibana_config_file="/usr/share/kibana/config/kibana.yml"
|
||||||
|
if grep -Fq "#xpack features" "$kibana_config_file";
|
||||||
|
then
|
||||||
|
declare -A CONFIG_MAP=(
|
||||||
|
[xpack.apm.ui.enabled]=$XPACK_APM
|
||||||
|
[xpack.grokdebugger.enabled]=$XPACK_DEVTOOLS
|
||||||
|
[xpack.searchprofiler.enabled]=$XPACK_DEVTOOLS
|
||||||
|
[xpack.ml.enabled]=$XPACK_ML
|
||||||
|
[xpack.canvas.enabled]=$XPACK_CANVAS
|
||||||
|
[xpack.logstash.enabled]=$XPACK_LOGS
|
||||||
|
[xpack.infra.enabled]=$XPACK_INFRA
|
||||||
|
)
|
||||||
|
for i in "${!CONFIG_MAP[@]}"
|
||||||
|
do
|
||||||
|
if [ "${CONFIG_MAP[$i]}" != "" ]; then
|
||||||
|
sed -i 's/.'"$i"'.*/'"$i"': '"${CONFIG_MAP[$i]}"'/' $kibana_config_file
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
else
|
||||||
|
echo "
|
||||||
|
#xpack features
|
||||||
|
xpack.apm.ui.enabled: $XPACK_APM
|
||||||
|
xpack.grokdebugger.enabled: $XPACK_DEVTOOLS
|
||||||
|
xpack.searchprofiler.enabled: $XPACK_DEVTOOLS
|
||||||
|
xpack.ml.enabled: $XPACK_ML
|
||||||
|
xpack.canvas.enabled: $XPACK_CANVAS
|
||||||
|
xpack.logstash.enabled: $XPACK_LOGS
|
||||||
|
xpack.infra.enabled: $XPACK_INFRA
|
||||||
|
console.enabled: $XPACK_INFRA
|
||||||
|
" >> $kibana_config_file
|
||||||
|
fi
|
||||||
Reference in New Issue
Block a user