Kibana Wazuh - No login page option
- 
Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.
 - 
@DustinB3403 said in Kibana Wazuh - No login page option:
Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.
 - 
@IRJ said in Kibana Wazuh - No login page option:
@DustinB3403 said in Kibana Wazuh - No login page option:
Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.
I've never understood why this is not part of the default installation.
 - 
@travisdh1 said in Kibana Wazuh - No login page option:
@IRJ said in Kibana Wazuh - No login page option:
@DustinB3403 said in Kibana Wazuh - No login page option:
Is there something I'm missing or is there no way to restrict access to Wazuh via a login function? Seems like a major feature to be lacking.
I've never understood why this is not part of the default installation.
Because elastic makes a ton of money selling a security solutions for ELK
 - 
So just reading over this it looks like I need to follow this piece specifically.
 - 
Yeah so going through that entire process using the plugin versions that matches just causes kibana to crash repeatedly and never actually start.
 - 
Might've found the issue.
 - 
 - 
Some progress, but my Kibana page just keeps sitting at "Kibana is not ready yet"
 - 
@black3dynamite said in Kibana Wazuh - No login page option:
What about just using nginx has an authentication?
https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/
I really wasn't planning on digging into nginx with this.
 - 
Got it!
Had to edit the url in /etc/kibana/kibana.yml to be https for the elasticsearch url.
It's working now.
 - 
@black3dynamite said in Kibana Wazuh - No login page option:
What about just using nginx has an authentication?
https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/
That is just for authentication to kibana, it doesnt actually protect API requests
 - 
Now to figure out how to change the flipping username and password because admin:admin ain't secure. . .
 - 
This is how you change the password.