Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wrong default values and missing settings for the Wazuh Dashboard configuration file #5500

Closed
AlexRuiz7 opened this issue Aug 3, 2022 · 1 comment · Fixed by #5502
Closed

Comments

@AlexRuiz7
Copy link
Member

Summary

Related issue: wazuh/wazuh-dashboard-plugins#4349

During the review of the in-file documentation for the wazuh.yml file, the configuration file for the Wazuh Dashboard App, we have detected that some settings are completely missing in the web documentation, and others need to be updates as are using wrong default values.

Missing settings:

  • checks.metaFields
  • checks.timeFilter
  • checks.maxBuckets
  • extensions.hipaa
  • extensions.nist
  • extensions.tsc
  • extensions.oscap
  • extensions.gcp

This setting allows hiding Wazuh for the specified roles. Related issue: wazuh/wazuh-dashboard-plugins#3164

  • disabled_roles

Name for the sample alerts index

  • alerts.sample.prefix

cron related settings: these settings configure the behavior of background tasks performed by the App.

  • cron.prefix
  • cron.statistics.status
  • cron.statistics.apis
  • cron.statistics.interval
  • cron.statistics.index.name
  • cron.statistics.index.creation
  • cron.statistics.shards
  • cron.statistics.replicas

These settings are used in the agents' enrollment interactive helper.

  • enrollment.dns
  • enrollment.password

Custom logos

  • customization.logo.app
  • customization.logo.sidebar
  • customization.logo.healthcheck
  • customization.logo.reports

Outdated settings:

  • wazuh-version.*: deprecated since 4.3.0. To be removed completely.
  • api.selector: deprecated. To be removed.
  • admin: seems to be no longer used. I assume it's been deprecated.
  • timeout: default value is set to 8000. Actual value is 20000.
  • wazuh.monitoring.shards: default value is set to 2. Actual value is 1.
  • wazuh.monitoring.creation: default value is d (daily). Actual value is w (weekly).
@yenienserrano
Copy link
Member

yenienserrano commented Aug 4, 2022

Missing settings:

  • checks.metaFields
  • checks.timeFilter
  • checks.maxBuckets
  • extensions.hipaa
  • extensions.nist
  • extensions.tsc
  • extensions.oscap
  • extensions.gcp

This setting allows hiding Wazuh for the specified roles. Related issue: wazuh/wazuh-dashboard-plugins#3164

  • disabled_roles

Name for the sample alerts index

  • alerts.sample.prefix

cron related settings: these settings configure the behavior of background tasks performed by the App.

  • cron.prefix
  • cron.statistics.status
  • cron.statistics.apis
  • cron.statistics.interval
  • cron.statistics.index.name
  • cron.statistics.index.creation
  • cron.statistics.shards
  • cron.statistics.replicas

These settings are used in the agents' enrollment interactive helper.

  • enrollment.dns
  • enrollment.password

Custom logos

  • customization.logo.app
  • customization.logo.sidebar
  • customization.logo.healthcheck
  • customization.logo.reports

Outdated settings:

  • wazuh-version.*: deprecated since 4.3.0. To be removed completely.
  • api.selector: deprecated. To be removed.
  • admin: seems to be no longer used. I assume it's been deprecated.
  • timeout: default value is set to 8000. Actual value is 20000.
  • wazuh.monitoring.shards: default value is set to 2. Actual value is 1.
  • wazuh.monitoring.creation: default value is d (daily). Actual value is w (weekly).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants