forked from wazuh/wazuh-docker
krzee
93d12d2143
The other way works too, but it seems pointless to go through extra steps when the if command already does exactly this
62 lines
1.9 KiB
Bash
62 lines
1.9 KiB
Bash
#!/bin/bash
|
|
# Wazuh Docker Copyright (C) 2021 Wazuh Inc. (License GPLv2)
|
|
|
|
wazuh_url="${WAZUH_API_URL:-https://wazuh}"
|
|
wazuh_port="${API_PORT:-55000}"
|
|
api_username="${API_USERNAME:-wazuh-wui}"
|
|
api_password="${API_PASSWORD:-wazuh-wui}"
|
|
|
|
kibana_config_file="/usr/share/kibana/data/wazuh/config/wazuh.yml"
|
|
|
|
declare -A CONFIG_MAP=(
|
|
[pattern]=$PATTERN
|
|
[checks.pattern]=$CHECKS_PATTERN
|
|
[checks.template]=$CHECKS_TEMPLATE
|
|
[checks.api]=$CHECKS_API
|
|
[checks.setup]=$CHECKS_SETUP
|
|
[extensions.pci]=$EXTENSIONS_PCI
|
|
[extensions.gdpr]=$EXTENSIONS_GDPR
|
|
[extensions.hipaa]=$EXTENSIONS_HIPAA
|
|
[extensions.nist]=$EXTENSIONS_NIST
|
|
[extensions.tsc]=$EXTENSIONS_TSC
|
|
[extensions.audit]=$EXTENSIONS_AUDIT
|
|
[extensions.oscap]=$EXTENSIONS_OSCAP
|
|
[extensions.ciscat]=$EXTENSIONS_CISCAT
|
|
[extensions.aws]=$EXTENSIONS_AWS
|
|
[extensions.gcp]=$EXTENSIONS_GCP
|
|
[extensions.virustotal]=$EXTENSIONS_VIRUSTOTAL
|
|
[extensions.osquery]=$EXTENSIONS_OSQUERY
|
|
[extensions.docker]=$EXTENSIONS_DOCKER
|
|
[timeout]=$APP_TIMEOUT
|
|
[api.selector]=$API_SELECTOR
|
|
[ip.selector]=$IP_SELECTOR
|
|
[ip.ignore]=$IP_IGNORE
|
|
[wazuh.monitoring.enabled]=$WAZUH_MONITORING_ENABLED
|
|
[wazuh.monitoring.frequency]=$WAZUH_MONITORING_FREQUENCY
|
|
[wazuh.monitoring.shards]=$WAZUH_MONITORING_SHARDS
|
|
[wazuh.monitoring.replicas]=$WAZUH_MONITORING_REPLICAS
|
|
[admin]=$ADMIN_PRIVILEGES
|
|
)
|
|
|
|
for i in "${!CONFIG_MAP[@]}"
|
|
do
|
|
if [ "${CONFIG_MAP[$i]}" != "" ]; then
|
|
sed -i 's/.*#'"$i"'.*/'"$i"': '"${CONFIG_MAP[$i]}"'/' $kibana_config_file
|
|
fi
|
|
done
|
|
|
|
CONFIG_CODE=$(curl ${auth} -s -o /dev/null -w "%{http_code}" -XGET $el_url/.wazuh/_doc/1513629884013)
|
|
|
|
if [[ "x$CONFIG_CODE" != "x200" ]] && ! grep -q 1513629884013 $kibana_config_file ; then
|
|
cat << EOF >> $kibana_config_file
|
|
hosts:
|
|
- 1513629884013:
|
|
url: $wazuh_url
|
|
port: $wazuh_port
|
|
username: $api_username
|
|
password: $api_password
|
|
EOF
|
|
else
|
|
echo "Wazuh APP already configured"
|
|
fi
|