Connecting wazuh with grafana

[Fawwas Hamdi]

i hope someone can help me with this issue, as we are planning to integrate Wazuh to send some log to grafana for a better visualization. the problem is that the API ip is bound to 127.0.0.1 so when we are trying to change it the dashboard is useless as im guessing the internal ip used for talking between server, dashboard and indexer. is there any other way to solve this issue?

[Diego Ariel Balbuena]

Hi hamdifawas! Thanks for sharing

Let me share the documentation for Securing the Wazuh API. It can be useful to edit the Wazuh API IP.

You will find the following note:

Warning

Changing the wazuh-wui user password will affect the Wazuh UI. You will have to update the /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml configuration file accordingly with the new credentials. To learn more, see the Wazuh dashboard configuration file document.

Something similar happens with the Wazuh API IP. Please check how the hosts section is configured on the /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml in Wazuh Dashboard.

I hope this helps!

Diego Ariel Balbuena