filebeat

[stetnt4]

 Hello!I forgot my dashboard password and I had to generate new ones. But an error appeared in filebeat. How can I add a new password?

Using the instructions, I created new passwords

https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html

 

curl -so wazuh-passwords-tool.sh https://packages.wazuh.com/4.5/wazuh-passwords-tool.sh

 

bash wazuh-passwords-tool.sh -a

 

We got it as an example

INFO: Wazuh API admin credentials not provided, Wazuh API passwords not changed.

INFO: The password for user admin is kwd139yG?YoIK?lRnqcXQ4R4gJDlAqKn

INFO: The password for user kibanaserver is Bu1WIELh9RdRlf*oGjinN1?yhF6XzA7V

INFO: The password for user kibanaro is 7kZvau11cPn6Y1SbOsdr8Kwr*BRiK3u+

INFO: The password for user logstash is SUbk4KTmLl*geQbUg0c5tyfwahjDMhx5

INFO: The password for user readall is ?w*Itj1Lgz.5w.C7vOw0Kxi7G94G8bG*

INFO: The password for user snapshotrestore is Z6UXgM8Sr0bfV.i*6yPPEUY3H6Du2rdz

WARNING: Wazuh indexer passwords changed. Remember to update the password in the Wazuh dashboard and Filebeat nodes if necessary, and restart the services.

[Olusegun Adenrele Oyebo]

Hello,

Thank you for using Wazuh.

Kindly confirm that you're using an all-in-one architecture? If you're using an all-in-one architecture, it should automatically update the passwords where necessary as stated in this section of the documentation. After running the password tool, you can also try to manually update the admin password in the Filebeat keystore. Replace <admin-password> with the random password generated:

• echo <admin-password> | filebeat keystore add password --stdin --force

Restart the Filebeat service to apply the change with the command below and do the Filebeat test again:

• systemctl restart filebeat
• filebeat test output

Also note that if you're using a distributed environment, you have to update the password on other components as detailed in this section of the documentation.

Finally after updating the password, kindly clear your browser cache and login with the new admin password.

I hope this was helpful. Do not hesitate to get back to us again if issue persists or if you have any other query.

Best regards.

[stetnt4]

I use all-in-one architecture, I added the admin password to filebeat, but still an error

четверг, 28 сентября 2023 г. в 15:13:51 UTC+3, Olusegun Adenrele Oyebo:

[stetnt4]

the question is closed

четверг, 28 сентября 2023 г. в 17:08:08 UTC+3, stetnt4:

[Olusegun Adenrele Oyebo]

Hello,

Do you still need assistance with this query or it has been resolved? Will be glad to hear from you again.

Best regards.

[stetnt4]

I need help with dashboard https://groups.google.com/g/wazuh/c/xOL6N_yUicI?hl=ru&hl=ru

пятница, 29 сентября 2023 г. в 10:07:16 UTC+3, Olusegun Adenrele Oyebo:

[Olusegun Adenrele Oyebo]

Hello,

I can see that your filebeat test was successful. Kindly restart your services in the following order:

• systemctl restart wazuh-indexer
• systemctl restart wazuh-manager
• systemctl restart filebeat
• systemctl restart wazuh-dashboard

Clear your browser cache and try again. If issue persists, kindly let us know so as to assist you further.

Best regards.

[stetnt4]

I used another browser, Wazuh Dashboard Server Is Not Ready Yet

пятница, 29 сентября 2023 г. в 19:17:30 UTC+3, Olusegun Adenrele Oyebo:

[stetnt4]

the issue is resolved

пятница, 29 сентября 2023 г. в 23:00:12 UTC+3, stetnt4:

[Olusegun Adenrele Oyebo]

Hello,

Thanks for confirming that the issue is resolved.

Do not hesitate to get back to us again if you have any other query.

Best regards.