User management gone after upgrade to 4.10.0

[Andrehens Chicfici]

Hey,

am I stupid or is the user management gone with the new release?

I swear I added users yesterday that worked. I used this manual to add users to access the wazuh-dashboard:

https://documentation.wazuh.com/4.10/user-manual/user-administration/rbac.html#creating-and-setting-a-wazuh-read-only-user

Now I can't find the indexer management anymore. The whole menu changed and now I have no idea where to look at.

[Bony V John]

Hi @Andrehens,

The Indexer Management option is still available in Wazuh version 4.10. Please check the user account you're using to access the dashboard. It’s possible that the account doesn’t have sufficient permissions to view this option.

I recommend logging in to the Wazuh dashboard using the default admin user account, which has full permissions. In my Wazuh environment, I used the default admin user, and the Indexer Management option is accessible (screenshot attached for reference).

Please verify this and let me know if you need further assistance.

Regards,

[Andrehens Chicfici]

I am logged in as admin... Yesterday I was able to create new users, which still work. But now my dashboard also looks very different now. I just have a burger menu with a 'custom' headline with just a list of all the options. 

Unfortunately pasting images is blocked from my workstation.

When I click Custom -> Security I can choose the tabs: 'Users', 'Roles', 'Policies, & 'Roles mapping'. The 'Internal Users' tab is missing. Also 'Permissions' and 'Audit Logs' Can you provide me the link to the 'Internal Users' Tab?

cheers

chic

[Andrehens Chicfici]

I managed to upload a screenshot:

Screenshot User-Management

There is no User-Management for the GUI anymore....

cheers chic

--
You received this message because you are subscribed to a topic in the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/Xy-tWsjfrvo/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wazuh/4c4d9f37-9a05-4c77-824a-04dc8bb83780n%40googlegroups.com.

[Bony V John]

Hi Andrehens,

I apologize for the delayed response. The Internal User, Permission, and Audit Logs tabs are still available. Could you confirm that you have navigated to the correct page of the Wazuh dashboard to check this?

Here is the actual location of these tabs: From the Home page, click on the hamburger icon in the top left corner > Indexer Management > Security. In the Security tab, you can view the above-mentioned tabs.

I believe you might be selecting the Security tab under the Server Management module. In that section, you will find Users, Roles, Policies, and Role Mapping tabs.

For the newer version, there is no change in the Security tabs.

Please check this and let me know the update.

Regards,

[Andrehens Chicfici]

Hey Bony,

the whole Indexer Management is gone.

Like you can see on this image:

Burger Menu

There is just the 'Security' tab without 'User Management' like you can see on the next image:

Security Tab

I am logged in as admin. I did not change any permissions. Indexer management was working the day before the update and adding users was also possible.

cheers

chic

[Bony V John]

Hi Andrehens,

Now I understand your issue. Could you please run the command below to check the version of the Wazuh Manager:

/var/ossec/bin/wazuh-control -j infoYou can find the modules installed on your server:

• deb (debian, ubuntu):
• sudo apt list --installed |grep wazuh
• rpm (Centos, Redhat, etc)
• sudo rpm -qa |grep wazuh

Also, check the Wazuh Dashboard version:
From the Home screen, click on the hamburger icon at the top left and select About to view the Wazuh Dashboard version.Could you please explain how you deployed the Wazuh service in the first place? Please share more details about your Wazuh environment.Kindly share screenshots of the above commands and the details of your environment for further assistance.

Additionally, please share the OS and OS version that you have used to install Wazuh central components.
Looking forward to your response.

Regards,

[Andrehens Chicfici]

/var/ossec/bin/wazuh-control -j info

{"error":0,"data":[{"WAZUH_VERSION":"v4.10.0"},{"WAZUH_REVISION":"41008"},{"WAZUH_TYPE":"server"}]}r

sudo apt list --installed |grep wazuh

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.                                                                                                                                                     wazuh-dashboard/stable,now 4.10.0-1 amd64  [installed]

wazuh-indexer/stable,now 4.10.0-1 amd64  [installed]

wazuh-manager/stable,now 4.10.0-1 amd64  [installed]  

App version: 4.10.0

App revision: 08

I deployed the instance in September of last year like it is described in the documentation. Just a single server. It worked flawless

I found out tonight that I can find the 'Internal Users' menu under:

https://xxx.xxx.xxx.xxx/app/data_administration_landing

I found out that I need to go to the Data administration tab at the end of the menu. Then I was able to access 'Internal Users'.

But where is the indexer management?

cheers

chic

[Bony V John]

Hi Andrehens,

Could you please restart the Wazuh dashboard service by running the following command:

systemctl restart wazuh-dashboard

Additionally, clear your browser's cache and cookies, and then try accessing the Wazuh dashboard again.

We attempted to replicate this issue on our end by upgrading, and it worked fine without any problems. However, we are continuing to look into this.

Please try the steps above and let us know the outcome.

Regards,

[Andrehens Chicfici]

Hey,

I tried restarting it, cleared cache and tried different browsers and clients. No change.

Same with different user accounts for wazuh.

cheers

chic

[Md. Nazmur Sakib]

We are following this issue on GitHub

Can you share the OS information, browsers used and their version, and if they have custom plugins installed in the OpenSearch or if it is directly from our package?

Can you share the information on that GitHub issue?

Link: https://github.com/wazuh/wazuh/issues/27687

Our development team is looking into this issue.

Looking forward to your update on this.

[Andrehens Chicfici]

@Md. Nazmur Sakib

That's exactly the problem!

My cluster:

wazuh-manager master, wazuh-indexer & wazuh-dashboard on one virtual server: 48Gb of memory; 8 cores, 700 GB storage

OS:

Ubuntu 24.04.1 LTS  

agents:

~100 agents, version 4.9.2.

authentication method: local accounts for dashboard (read-only), local admin account for dashboard, local admin accounts for server management.

cheers chic

[Bony V John]

Hi,

Please refer to the GitHub issue: https://github.com/wazuh/wazuh/issues/27687#issuecomment-2598101304, which is similar to your issue. The Wazuh development team has provided a solution to fix this issue. A user followed the solution, and this problem was resolved. Please run the command on your end and let us know the update.

Regards,

[Bony V John]

Hi Andrehens,

I hope your issue has been resolved. Please let us know if you have any further questions related to this. 

Regards,