Visualize Server Security on CentOS 7 with an Elastic Stack and Wazuh

[Rajakavitha1]

Update the guide based on the comments in DisQus:

Suggestion:
You can edit /etc/kibana/kibana.yml and change server.host: "0.0.0.0" back to server.host: "locahost" to fix this.

Port 5601 does not have authentication. It is a direct connection to Kibana. So normally you block port 5601 at the firewall or using iptables, and only use www.test.com on port 80 or 443. The authentication is provided by Nginx, not Kibana. So normally you don't use www.test.com:5601 except for testing or debugging- just block that port via iptables for security.

and
For "4. Install the Wazuh app for Kibana: " You should replace https://packages.wazuh.com/wazuhapp/wazuhapp-3.7.1_6.5.2.zip . with what ever the most current version is.

Otherwise you'll get an error when you add the Wazuh API Entry in Kibana Dashboard