From 6181ecddbd39bae40e8fad50fbfedad5759422a5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Carlos=20Anguita=20L=C3=B3pez?= Date: Tue, 11 Jun 2024 14:20:18 +0200 Subject: [PATCH 1/3] add custom user info and delete obsolete instructions --- .../user-administration/password-management.rst | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/source/user-manual/user-administration/password-management.rst b/source/user-manual/user-administration/password-management.rst index 12837f4f64..72c0fd5a41 100644 --- a/source/user-manual/user-administration/password-management.rst +++ b/source/user-manual/user-administration/password-management.rst @@ -213,12 +213,17 @@ Follow the instructions below to change the passwords for all the Wazuh indexer INFO: The password for Wazuh API user wazuh is ivLOfmj7.jL6*7Ev?UJoFjrkGy9t6Je. INFO: The password for Wazuh API user wazuh-wui is fL+f?sFRPEv5pYRE559rqy9b6G4Z5pVi -#. On `all your Wazuh server nodes`, run the following command to update the `admin` password in the Filebeat keystore and in the ``ossec.conf`` file for the Wazuh server. Replace ```` with the random password generated in the first step. +#. On `all your Wazuh server nodes`, run the following command to update the `admin` password in the Filebeat keystore. Replace ```` with the random password generated in the first step. .. code-block:: console # echo | filebeat keystore add password --stdin --force - # sed -i 's/.*<\/password>/<\/password>/g' /var/ossec/etc/ossec.conf + + .. note:: If you set up a user other than admin for Filebeat you will have to add the user manually. + + .. code-block:: console + + # echo | filebeat keystore add username --stdin --force #. Restart Filebeat and the Wazuh server to apply the change. From af2b5b022755d80d76728de5a522de847a2f11f9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Carlos=20Anguita=20L=C3=B3pez?= Date: Thu, 13 Jun 2024 10:01:48 +0200 Subject: [PATCH 2/3] changed whole third step to a note --- .../password-management.rst | 18 +++++------------- 1 file changed, 5 insertions(+), 13 deletions(-) diff --git a/source/user-manual/user-administration/password-management.rst b/source/user-manual/user-administration/password-management.rst index 72c0fd5a41..1d5c337ca1 100644 --- a/source/user-manual/user-administration/password-management.rst +++ b/source/user-manual/user-administration/password-management.rst @@ -213,24 +213,16 @@ Follow the instructions below to change the passwords for all the Wazuh indexer INFO: The password for Wazuh API user wazuh is ivLOfmj7.jL6*7Ev?UJoFjrkGy9t6Je. INFO: The password for Wazuh API user wazuh-wui is fL+f?sFRPEv5pYRE559rqy9b6G4Z5pVi -#. On `all your Wazuh server nodes`, run the following command to update the `admin` password in the Filebeat keystore. Replace ```` with the random password generated in the first step. - - .. code-block:: console - - # echo | filebeat keystore add password --stdin --force - - .. note:: If you set up a user other than admin for Filebeat you will have to add the user manually. + .. note:: If you set up a user other than admin for Filebeat you will have to add the username and password manually by running the following commands. Replace ```` with your custom username and ```` with your custom password. .. code-block:: console # echo | filebeat keystore add username --stdin --force + # echo | filebeat keystore add password --stdin --force + + Then, restart Filebeat to apply the changes. -#. Restart Filebeat and the Wazuh server to apply the change. - - .. include:: /_templates/common/restart_filebeat.rst - .. include:: /_templates/common/restart_manager.rst - - .. note:: Repeat steps 3 and 4 on `every Wazuh server node`. + .. include:: /_templates/common/restart_filebeat.rst #. On your `Wazuh dashboard node`, run the following command to update the `kibanaserver` password in the Wazuh dashboard keystore. Replace ```` with the random password generated in the first step. From e2be2dcadb97c03197e0432e7478f8bec19e5d36 Mon Sep 17 00:00:00 2001 From: Javier Medeot Date: Thu, 13 Jun 2024 18:00:10 -0300 Subject: [PATCH 3/3] Add changes from review --- .../user-administration/password-management.rst | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/source/user-manual/user-administration/password-management.rst b/source/user-manual/user-administration/password-management.rst index 1d5c337ca1..45abdedf5d 100644 --- a/source/user-manual/user-administration/password-management.rst +++ b/source/user-manual/user-administration/password-management.rst @@ -213,16 +213,16 @@ Follow the instructions below to change the passwords for all the Wazuh indexer INFO: The password for Wazuh API user wazuh is ivLOfmj7.jL6*7Ev?UJoFjrkGy9t6Je. INFO: The password for Wazuh API user wazuh-wui is fL+f?sFRPEv5pYRE559rqy9b6G4Z5pVi - .. note:: If you set up a user other than admin for Filebeat you will have to add the username and password manually by running the following commands. Replace ```` with your custom username and ```` with your custom password. +#. If you've set up a user other than ``admin`` for Filebeat, manually add the username and password using the following commands. Replace ```` and ```` with your custom username and password. - .. code-block:: console + .. code-block:: console - # echo | filebeat keystore add username --stdin --force - # echo | filebeat keystore add password --stdin --force + # echo | filebeat keystore add username --stdin --force + # echo | filebeat keystore add password --stdin --force - Then, restart Filebeat to apply the changes. + Restart Filebeat to apply the changes. - .. include:: /_templates/common/restart_filebeat.rst + .. include:: /_templates/common/restart_filebeat.rst #. On your `Wazuh dashboard node`, run the following command to update the `kibanaserver` password in the Wazuh dashboard keystore. Replace ```` with the random password generated in the first step.