Page 1 of 1

OSSEC Virtual Appliance

Posted: Thu Jul 01, 2021 9:39 am
by ITGUYTK
Has anybody had any luck upgrading the Appliance? I have been able to upgrade the Elasticsearch but when I try the Kibana it always ends up breaking things.

the Yum commands listed in the readme #8 doesn't work either.

Re: OSSEC Virtual Appliance

Posted: Thu Jul 01, 2021 12:13 pm
by cponton
Do you have an error output that you are seeing after having updated the Kibana service?

Re: OSSEC Virtual Appliance

Posted: Thu Jul 01, 2021 12:25 pm
by ITGUYTK
None that I can find, I am really green with this so apologies upfront. After doing the elastiscsearch Upgrade, the Upgrade Assistant then says I am ready to do the upgrade to Kibana upgrade. Here is where I fail and it maybe in what I am doing. After having done things so many different ways, I think this is the page I am starting from.

https://www.elastic.co/guide/en/kibana/current/rpm.html

After following it through and then restarting things, I can not get Kibana to open, I can do the Eleasticseach check https://localhost:9200 and the check screen comes up.

Otherwise when I attempt to run Kibana I just get the page can not be found type of message.

Re: OSSEC Virtual Appliance

Posted: Thu Jul 01, 2021 2:51 pm
by cponton
Can you verify that kibana is running with ps ax | grep kibana

Also, if you could grep "kibana" /var/log/messages
to see if any errors occur there

Re: OSSEC Virtual Appliance

Posted: Thu Jul 01, 2021 4:59 pm
by ITGUYTK
I will look at this again next week, in order to move forward I reset to the base appliance. I will try again to do the updates and will report back.