Wazuh v3.2.3 - Kibana v6.2.4

Highlights for this version

• Support for Wazuh v3.2.3.
• New functionality - Reporting (#510):
  • Generate PDF logs on the Overview and Agents tabs, with the new button next to Panels and Discover.
  • The report will contain the current visualizations from the tab where you generated it.
  • List all your generated reports, download or deleted them at the new Management/Reporting tab.
  • Warning: If you leave the tab while generating a report, the process will be aborted.
• Added warning/error messages about the total RAM on the server side (#502):
  • None of this messages will prevent the user from accessing the app, it's just a recommendation.
  • If your server has less than 2GB of RAM, you'll get an error message when opening the app.
  • If your server has between 2GB and 3GB of RAM, you'll get a warning message.
  • If your server has more than 3GB of RAM, you won't get any kind of message.
• Refactoring and added loading bar to Manager Logs and Groups tabs (#505).
• Added more Syscheck options to Management/Agents configuration tabs (#509).
• Brand-new extension - GDPR Alerts (#453):
  • A new extension, enabled by default.
  • Visualize alerts related to the GDPR compliance on the Overview and Agents tabs.
  • The Ruleset tab has been updated to include GDPR filters on the Rules subtab.
• Brand-new Management tab - Monitoring (#490):
  • Visualize your Wazuh cluster, both master and clients.
    • Get the current cluster configuration.
    • Nodes listing, sorting, searching, etc.
  • Get a more in-depth cluster status thanks to the newly added Timelion visualizations.
  • The Detail view gives you a summary of the node's healthcheck.
• Brand-new tab - Dev tools (#449):
  • Find it on the top navbar, next to Discover.
  • Execute Wazuh API requests directly from the app.
  • This tab uses your currently selected API from Settings.
  • You can type different API requests on the input window, select one with the cursor, and click on the Play button to execute it.
  • You can also type comments on the input window.
• More improvements for the Manager/Ruleset tab (#446):
  • A new colour palette for regex, order and rule description arguments.
  • Added return to List view on Ruleset button while on Detail view.
  • Fixed line height on all table headers.
  • Removed unused, old code from Ruleset controllers.
• Added option on config.yml to enable/disable the wazuh-monitoring index (#441):
  • Configure the frequency time to generate new indices.
  • The default frequency time has been increased to 1 hour.
  • When disabled, useful metrics will appear on Overview/General replacing the Agent status visualization.
• Added CSV exporting button to the app (#431):
  • Implemented new logic to fetch data from the Wazuh API and download it in CSV format.
  • Currently available for the Ruleset, Logs and Groups sections on the Manager tab and also the Agents tab.
• More refactoring to the app backend (#439):
  • Standardized error output from the server side.
  • Drastically reduced the error management logic on the client side.
  • Applied the Facade pattern when importing/exporting modules.
  • Deleted unused/deprecated/useless methods both from server and client side.
  • Some optimizations to variable type usages.
• Refactoring to Kibana filters management (#452 & #459):
  • Added new class to build queries from the base query.
  • The filter management is being done on controllers instead of the discover directive.
  • Now we are emitting specific events whenever we are fetching data or communicating to the discover directive.
  • The number of useless requests to fetch data has been reduced.
  • The synchronization actions are working as expected regardless the amount of data and/or the number of machine resources.
  • Fixed several bugs about filter usage and transition to different app tabs.
• Added confirmation message when the user deletes an API entry on Settings/API (#428).
• Added support for filters on the Manager/Logs tab when realtime is enabled (#433).
• Added more filter options to the Detail view on Manager/Ruleset (#434).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.2 - Kibana v6.2.4

Highlights for this version

• Support for Wazuh v3.2.2.
• Refactoring on visualizations use and management (#397):
  • Visualizations are no longer stored on an index, they're built and loaded on demand when needed to render the interface.
  • Refactoring on the whole app source code to use the import/export paradigm.
  • Removed old functions and variables from the old visualization management logic.
  • Removed cron task to clean remaining visualizations since it's no longer needed.
  • Some Kibana functions and modules have been overridden in order to make this refactoring work.
    • This change is not intrusive in any case.
• New redesign for the Manager/Ruleset tab (#420):
  • Rules and decoders list now divided into two different sections: List view and Detail view.
  • Removed old expandable tables to move the rule/decoder information into a new space.
  • Enable different filters on the detail view for a better search on the list view.
  • New table for related rules or decoders.
  • And finally, a bunch of minor design enhancements to the whole app.
• Added a copyright notice to the whole app source code (#395).
• Updated .gitignore with the Node template (#395).
• Added new module to the package.json file, rison (#404).
• Added the errorHandler service to the blank screen scenario (#413):
  • Now the exact error message will be shown to the user, instead of raw JSON content.
• Added new option on the config.yml file to disable the new X-Pack RBAC capabilities to filter index-patterns (#417).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.1 - Kibana v6.2.4

Highlights for this version

• Support for Elastic Stack v6.2.4.
• App server fully refactored (#360):
  • Added new classes, reduced the amount of code, removed unused functions, and several optimizations.
  • Now the app follows a more ES6 code style on multiple modules.
  • Overview/Agents visualizations have been divided into separated files and folders.
  • Now the app can use the default index defined on the /ect/kibana/kibana.yml file.
  • Better error handling for the visualizations directive.
  • Added a cron job to delete remaining visualizations on the .kibana index if so.
  • Also, we've added some changes when using the X-Pack plugin:
    • Better management of users and roles in order to use the app capabilities.
    • Prevents app loading if the currently logged user has no access to any index pattern.
• Added the errorHandler service to the dataHandler factory (#340).
• Added Syscollector section to Manager/Agents Configuration tabs (#359).
• Added cluster.name field to the wazuh-monitoring index (#377).
• Refactoring on visualizations use and management (#397):
  • Visualizations are no longer stored on an index, they're built and loaded on demand when needed to render the interface.
  • Refactoring on the whole app source code to use the import/export paradigm.
  • Removed old functions and variables from the old visualization management logic.
  • Removed cron task to clean remaining visualizations since it's no longer needed.
  • Some Kibana functions and modules have been overridden in order to make this refactoring work.
    • This change is not intrusive in any case.
• New redesign for the Manager/Ruleset tab (#420):
  • Rules and decoders list now divided into two different sections: List view and Detail view.
  • Removed old expandable tables to move the rule/decoder information into a new space.
  • Enable different filters on the detail view for a better search on the list view.
  • New table for related rules or decoders.
  • And finally, a bunch of minor design enhancements to the whole app.
• Added a copyright notice to the whole app source code (#395).
• Updated .gitignore with the Node template (#395).
• Added new module to the package.json file, rison (#404).
• Added the errorHandler service to the blank screen scenario (#413):
  • Now the exact error message will be shown to the user, instead of raw JSON content.
• Added new option on the config.yml file to disable the new X-Pack RBAC capabilities to filter index-patterns (#417).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.1 - Kibana v6.2.2

This release comes with all the changes from the previous version, plus a bunch of new additions an bugfixes:

Highlights for this version

• Support for Wazuh 3.2.1.
• New design for the Manager/Groups tab (#295).
• New design for the Manager/Configuration tab (#297).
• New design of agents statistics for the Agents tab (#299).
• Added information ribbon into Overview/Agent SCAP tabs (#303).
• Added information ribbon into Overview/Agent VirusTotal tabs (#306).
• Added information ribbon into Overview AWS tab (#306).
• New logging system (#307).
• Better cookies handling (#308).
• New design for the Agents/Configuration tab (#310).
• Added "group" column on the agents list in Agents (#312).
• New option for the config.yml file, ip.selector (#313).
• More CSS cleanup and reordering (#315).
• New design for the top navbar (#326).
• New design for the wz-chip component to follow the new Wazuh app guidelines (#323).
• Added more descriptive error messages when the user inserts bad credentials on the Add new API form in the Settings tab (#331).
• Added a new CSS class to truncate overflowing text on tables and metric ribbons (#332).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.0 - Kibana v6.2.2

Highlights for this version

• Brand-new first redesign for the app user interface (#278).
• New shards and replicas settings to the config.yml file (#277).

Other changes and fixes

• Now clicking again on the Groups tab on Manager will properly reload the tab and redirect to the beginning (#274).
• Now the visualizations only use the vis-id attribute for loading them (#275).
• The colors from the toast messages have been replaced to follow the Elastic 6 guidelines (#286).
• Fixed wrong data flow on Agents/General when coming from and going to the Groups tab (#273).
• Fixed sorting on tables, now they use the sorting functionality provided by the Wazuh API (#274).
• Fixed column width issues on some tables (#274).
• Fixed bug on the Agent configuration JSON viewer who didn't properly show the full group configuration (#276).
• Fixed excesive loading time from some Audit visualizations (#278).
• Fixed Play/Pause button in timepicker's auto-refresh (#281).
• Fixed unusual scenario on visualization directive where sometimes there was duplicated implicit filters when doing a search (#283).
• Fixed some Overview Audit visualizations who were not working properly (#285).
• Deleted the id attribute from all the app visualizations (#275).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.0 - Kibana v6.2.0

Highlights for this version

• Support for Wazuh 3.2.0.
• Compatibility with Kibana 6.2.0.
• New tab for vulnerability detector alerts.

Other changes and fixes

• The app now shows the index pattern selector only if the list length is greater than 1.
• Now the index pattern selector only shows the compatible ones.
• Updated Bootstrap to 3.3.7.
• Improved filter propagation between Discover and the visualizations.
• Replaced the login route name from /login to /wlogin to avoid conflict with X-Pack own login route.
• Several CSS bugfixes for better compatibility with Kibana 6.2.1.
• Some variables changed for adapting new Wazuh API requests.
• Better error handling for some Elastic-related messages.
• Fixed browser console error from top-menu directive.
• Removed undesired md-divider from Manager/Logs.
• Adjusted the width of a column in Manager/Logs to avoid overflow issues with the text.
• Fixed a wrong situation with the visualizations when we refresh the Manager/Rules tab.
• Removed the travis.yml file.

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.0 - Kibana v6.1.3

Added

• Support for Wazuh 3.2.0.
• Compatibility with Kibana 6.2.0.
• New tab for vulnerability detector alerts.

Changed

• Updated Bootstrap to 3.3.7.

Fixed

• Several CSS bugfixes for better compatibility with Kibana 6.2.0.
• Some variables changed for adapting new Wazuh API requests.
• Better error handling for some Elastic-related messages.

Removed

• Removed the travis.yml file.

Wazuh v3.1.0 - Kibana v6.1.0

Added

• Supporting Wazuh version 3.1.0.

Fixed

• Preventing duplicate APIs from feeding the wazuh-monitoring index.
• Fixing the check manager connection button.
• Adding 365 days expiring time to the cookies.
• Fixing the extensions settings so they are preserved over time.
• Many more error handling messages in all the tabs.
• Fixed OS filters in agents list.
• Fixed autocomplete lists in the agents, rules and decoders list so they properly scroll.
• Many style fixes for the different browsers.
• Improved reindex process for the .wazuh index when upgrading from a 2.x-5.x version.

Wazuh v3.0.0 - Kibana v6.1.0

Frontend

• Dynamically changed the index-pattern used by going to settings -> pattern tab (auto detects Wazuh alerts compatibility).
• Decoupling selected API and pattern from backend and moved to client.

Backend

• You can configure the initial index-pattern used by the plugin in the initialPattern variable of the app's package.json.
• Auto .wazuh reindex from Wazuh 2.x - Kibana 5.x and Wazuh 3.x - Kibana 5.x -> api credentials automatically migrated.
• Dynamically creating .kibana index if necessary.

Wazuh v3.0.0 - Kibana v6.0.0

Frontend

• New loader for visualizations.
• Better discover integration.
• Better performance: now the tabs use the same discover, only changing filters.
• New groups tab: now you can check your groups configuration (search its agents and configuration files).
• Logs tab improved: you can sort by field and the view has been improved.
• Implicit filters per tab showed as unremovable chips -> clearer interface.

Backend

• Visualizations loaded at initialization time.
• New sync system to wait for elasticsearch js.