Elasticsearch/logstash/kibana: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 22: | Zeile 22: | ||
=Enroll Key generieren= | =Enroll Key generieren= | ||
*/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana | */usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana | ||
| − | + | eyJ2ZXIiOiI4LjEzLjMiLCJhZHIiOlsiMTAuODEuMjU1LjE1MTo5MjAwIl0sImZnciI6IjY2ZTQzZmM5MGZiMjQwNWU3ZDk1OGY5NjQ5ODkxOWQwNjc1NTU1M2QwNmZhYWRjNmE1MGUxMWM5YTIxZDZkZDEiLCJrZXkiOiJReW1PVW84QkhEa2RqdFJ3TzZaWDptTzNJcDU0Q1RYMmhpdGptUDlLVTlnIn0= | |
Version vom 7. Mai 2024, 10:17 Uhr
Voraussetzung
- Installieren von Kali Purple
Update
- apt update && apt upgrade
Checken wie der Hostname ist
- hostname -f
purple.xinux.org
Installation von elasticsearch
- apt install elasticsearch -y
- Wir notieren das Passwort
The generated password for the elastic built-in superuser is : tMF3iXWcd*Wb-RMbE9+F
Installation von kibana
- apt install kibana -y
kibana keystore anlegen
- /usr/share/kibana/bin/kibana-encryption-keys generate -q
kibana ports und ip anpassen
- echo "server.port: 5601" >> /etc/kibana/kibana.yml
- echo "server.host: 0.0.0.0" >> /etc/kibana/kibana.yml
kibana und elastic starten und systemstart aktivieren
- sudo systemctl enable elasticsearch kibana --now
Enroll Key generieren
- /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana
eyJ2ZXIiOiI4LjEzLjMiLCJhZHIiOlsiMTAuODEuMjU1LjE1MTo5MjAwIl0sImZnciI6IjY2ZTQzZmM5MGZiMjQwNWU3ZDk1OGY5NjQ5ODkxOWQwNjc1NTU1M2QwNmZhYWRjNmE1MGUxMWM5YTIxZDZkZDEiLCJrZXkiOiJReW1PVW84QkhEa2RqdFJ3TzZaWDptTzNJcDU0Q1RYMmhpdGptUDlLVTlnIn0=