create kibana user

[Aytekin Döne]

Hi everyone

How can i create kibana user with roles?

[Juan Carlos Rodríguez]

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

[Aytekin Döne]

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Juan Carlos Rodríguez]

Hi Aytekin,

You must execute the commands in your Kibana installation directory. Maybe /usr/share/kibana/?.

Hope this helps.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

​

[Juan Carlos Rodríguez]

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

[Aytekin Döne]

Ok Juan 

i realized x-pack already inculueded in Kibana

"Kibana now contains X-Pack by default, there is no longer any need to install it as it is already present."

so,how can i create user for kibana interface

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5b4be2a2-8a70-4f6f-aa1f-d9efb614bd8f%40googlegroups.com.

[Juan Carlos Rodríguez]

Hi Aytekin,

As I explained in the first email, what you have to do first of all is activate the X-Pack license (you can choose between a free 30-day trial to try the advanced X-Pack features, or upload a license if you already purchased one) and configure it.

Once Kibana is running It’s going to ask us for login, we’ll use the elastic user with the password that you have configured in the previous step.

Once you have logged in correctly, click on the Management section:

Now let’s create our roles. We must define user roles to determine who can use the app or see specific index patterns. Let’s create an example user for you to see the process. Find and click on the roles option.

Click on Create role.

We’re going to name this example role wazuh-admin. Then you have to assign the permissions for each index. In this case this example role will have all permissions for all indexes. Finally, click on Create role.

Now we’re going to create a user and assign it this role. Select the Users link on the left and click the Create new user button.

We’ll name this user your-user and set the password. We don’t need to set the full name and email address. We need to assign our wazuh-admin role. Finally, click on Create user.

OK we’re all set with the new user. We can now log out as the elastic user and we can login as your-user.

If you still have questions, please write to us again.

Hope this helps.

Regards,
Juan Carlos

On Tuesday, May 21, 2019 at 10:26:59 AM UTC+2, Aytekin Döne wrote:

Ok Juan 

i realized x-pack already inculueded in Kibana

"Kibana now contains X-Pack by default, there is no longer any need to install it as it is already present."

so,how can i create user for kibana interface

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

​

[Aytekin Döne]

Thanks Juan,

after i choose free x pack licence, accsees has gone completely

i get this error 

Kibana server is not ready yet  

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 13:41 tarihinde şunu yazdı:

Hi Aytekin,

As I explained in the first email, what you have to do first of all is activate the X-Pack license (you can choose between a free 30-day trial to try the advanced X-Pack features, or upload a license if you already purchased one) and configure it.

Once Kibana is running It’s going to ask us for login, we’ll use the elastic user with the password that you have configured in the previous step.

Once you have logged in correctly, click on the Management section:

Now let’s create our roles. We must define user roles to determine who can use the app or see specific index patterns. Let’s create an example user for you to see the process. Find and click on the roles option.

Click on Create role.

We’re going to name this example role wazuh-admin. Then you have to assign the permissions for each index. In this case this example role will have all permissions for all indexes. Finally, click on Create role.

Now we’re going to create a user and assign it this role. Select the Users link on the left and click the Create new user button.

We’ll name this user your-user and set the password. We don’t need to set the full name and email address. We need to assign our wazuh-admin role. Finally, click on Create user.

OK we’re all set with the new user. We can now log out as the elastic user and we can login as your-user.

If you still have questions, please write to us again.

Hope this helps.

Regards,
Juan Carlos

On Tuesday, May 21, 2019 at 10:26:59 AM UTC+2, Aytekin Döne wrote:

Ok Juan 

i realized x-pack already inculueded in Kibana

"Kibana now contains X-Pack by default, there is no longer any need to install it as it is already present."

so,how can i create user for kibana interface

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5b4be2a2-8a70-4f6f-aa1f-d9efb614bd8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/ff81a7c9-f7d7-4284-bbc4-67887158e109%40googlegroups.com.

[Juan Carlos Rodríguez]

Hi Aytekin,

It is possible that your elasticsearch service is in a failed state. Could you execute and paste the output of the commands below:

systemctl status elasticsearch -l

cat /var/log/elasticsearch/my-cluster.log

Let’s see if there’s any error log to help us identify what’s going on.

And please, can you send the contents of your /etc/elasticsearch/elasticsearch.yml file?

Regards.

On Wednesday, May 22, 2019 at 8:43:45 AM UTC+2, Aytekin Döne wrote:

Thanks Juan,

after i choose free x pack licence, accsees has gone completely

i get this error 

Kibana server is not ready yet  

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 21 May 2019 Sal, 13:41 tarihinde şunu yazdı:

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5b4be2a2-8a70-4f6f-aa1f-d9efb614bd8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

​

[Aytekin Döne]

Hi

Is there another method than x-pack to create the user on kibana interface?

i have single server

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 22 May 2019 Çar, 14:58 tarihinde şunu yazdı:

Hi Aytekin,

It is possible that your elasticsearch service is in a failed state. Could you execute and paste the output of the commands below:

systemctl status elasticsearch -l

cat /var/log/elasticsearch/my-cluster.log

Let’s see if there’s any error log to help us identify what’s going on.

And please, can you send the contents of your /etc/elasticsearch/elasticsearch.yml file?

Regards.

On Wednesday, May 22, 2019 at 8:43:45 AM UTC+2, Aytekin Döne wrote:

Thanks Juan,

after i choose free x pack licence, accsees has gone completely

i get this error 

Kibana server is not ready yet  

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 13:41 tarihinde şunu yazdı:

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5b4be2a2-8a70-4f6f-aa1f-d9efb614bd8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/ff81a7c9-f7d7-4284-bbc4-67887158e109%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/128cf66e-0ad1-4278-ad5e-989c615a0f6a%40googlegroups.com.

[Juan Carlos Rodríguez]

Hi Aytekin,

As I explained, you have the option to use the alternative offered by Search Guard to create users. Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

But I recommend you to create users with X-Pack because since the new version of ELK 7.10 security for Elasticsearch is free and, among other things, allows role-based access control for controlling user access to cluster APIs and indexes. Here you can find more information https://www.elastic.co/blog/security-for-elasticsearch-is-now-free

And here you have a video tutorial on how to configure it in this new version, and how to create roles and users in Kibana https://www.youtube.com/watch?v=nMh1HWWe6B4&feature=youtu.be

Hope this helps.

Regards,
Juan Carlos

On Wednesday, May 22, 2019 at 2:40:53 PM UTC+2, Aytekin Döne wrote:

Hi

Is there another method than x-pack to create the user on kibana interface?

i have single server

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 22 May 2019 Çar, 14:58 tarihinde şunu yazdı:

Hi Aytekin,

It is possible that your elasticsearch service is in a failed state. Could you execute and paste the output of the commands below:

systemctl status elasticsearch -l

cat /var/log/elasticsearch/my-cluster.log

Let’s see if there’s any error log to help us identify what’s going on.

And please, can you send the contents of your /etc/elasticsearch/elasticsearch.yml file?

Regards.

On Wednesday, May 22, 2019 at 8:43:45 AM UTC+2, Aytekin Döne wrote:

Thanks Juan,

after i choose free x pack licence, accsees has gone completely

i get this error 

Kibana server is not ready yet  

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 21 May 2019 Sal, 13:41 tarihinde şunu yazdı:

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos.rodriguez@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5b4be2a2-8a70-4f6f-aa1f-d9efb614bd8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/ff81a7c9-f7d7-4284-bbc4-67887158e109%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

​

[Aytekin Döne]

Thanks Juan

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 28 May 2019 Sal, 13:47 tarihinde şunu yazdı:

Hi Aytekin,

As I explained, you have the option to use the alternative offered by Search Guard to create users. Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

But I recommend you to create users with X-Pack because since the new version of ELK 7.10 security for Elasticsearch is free and, among other things, allows role-based access control for controlling user access to cluster APIs and indexes. Here you can find more information https://www.elastic.co/blog/security-for-elasticsearch-is-now-free

And here you have a video tutorial on how to configure it in this new version, and how to create roles and users in Kibana https://www.youtube.com/watch?v=nMh1HWWe6B4&feature=youtu.be

Hope this helps.

Regards,
Juan Carlos

On Wednesday, May 22, 2019 at 2:40:53 PM UTC+2, Aytekin Döne wrote:

Hi

Is there another method than x-pack to create the user on kibana interface?

i have single server

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 22 May 2019 Çar, 14:58 tarihinde şunu yazdı:

Hi Aytekin,

It is possible that your elasticsearch service is in a failed state. Could you execute and paste the output of the commands below:

systemctl status elasticsearch -l

cat /var/log/elasticsearch/my-cluster.log

Let’s see if there’s any error log to help us identify what’s going on.

And please, can you send the contents of your /etc/elasticsearch/elasticsearch.yml file?

Regards.

On Wednesday, May 22, 2019 at 8:43:45 AM UTC+2, Aytekin Döne wrote:

Thanks Juan,

after i choose free x pack licence, accsees has gone completely

i get this error 

Kibana server is not ready yet  

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 13:41 tarihinde şunu yazdı:

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 21 May 2019 Sal, 10:35 tarihinde şunu yazdı:

Hi Aytekin again, just a point:

In fact, X-Pack is already included in Kibana from 6.3.x so, if your Elastic environment exceeds that version, you just have to follow the guide to configure it, because you already have it installed.

Sorry about that. Let us know the results.

Regards,
Juan Carlos

On Monday, May 20, 2019 at 4:22:24 PM UTC+2, Aytekin Döne wrote:

thanks juan

i try to install x-pack in kibana.

i ran following command in  /etc/kibana

/bin/kibana-plugin install file:///home/aytekin/x-pack-6.2.4.zip
-bash: /bin/kibana-plugin: No such file or directory

is it right?

Juan Carlos Rodríguez <juancarlos...@wazuh.com>, 20 May 2019 Pzt, 12:15 tarihinde şunu yazdı:

Hi Aytekin,

What you're looking for is X-Pack. X-Pack Security plugin provides RBAC (role based access control) capabilities for the Elastic Stack and, using it, you can define user roles to determine who can use the app or see specific index patterns.

You can learn more about Wazuh app and X-Pack (and how to configure it) here https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/index.html

Once set up, you can find a detailed guide on how to configure roles and users here: https://documentation.wazuh.com/3.x/user-manual/kibana-app/configure-xpack/defining-xpack-users.html

In contrast, you can use the alternative offered by Search Guard by working with different industry standard authentication techniques.

Here is how to configure it https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#, and more specifically how to configure the users here https://documentation.wazuh.com/current/installation-guide/installing-elastic-stack/searchguard.html#setting-up-search-guard-roles

If you have any questions or problems during the process, please don't hesitate to ask us.

Regards,

Juan Carlos

On Monday, May 20, 2019 at 10:00:15 AM UTC+2, Aytekin Döne wrote:

Hi everyone

How can i create kibana user with roles?

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/a70211df-e553-494d-a2e0-d0220959abf2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5b4be2a2-8a70-4f6f-aa1f-d9efb614bd8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/ff81a7c9-f7d7-4284-bbc4-67887158e109%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/128cf66e-0ad1-4278-ad5e-989c615a0f6a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

​

--

You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.

To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.

To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/85ea4aa8-e049-4306-8820-10110778e5a4%40googlegroups.com.