Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable additional Wazuh modules via Dashboard environment variables #1346

Closed
BAStos525 opened this issue May 16, 2024 · 4 comments · Fixed by #1416
Closed

Enable additional Wazuh modules via Dashboard environment variables #1346

BAStos525 opened this issue May 16, 2024 · 4 comments · Fixed by #1416
Assignees
Labels

Comments

@BAStos525
Copy link

In this README section it's written that Wazuh modules could be enabled/disabled via environment variables. By the way, when setting such vars EXTENSIONS_AWS, EXTENSIONS_DOCKER... to =true in docker-compose file, they are still not enabled in Dashboard. Only the default ones modules like EXTENSIONS_AUDIT, EXTENSIONS_NIST are on.

@CarlosALgit CarlosALgit self-assigned this Jun 21, 2024
@CarlosALgit
Copy link
Member

Update Report

I deployed an environment with Docker trying to replicate the issues encountered. I'm currently checking the path of the issues to try to solve them.

@wazuhci wazuhci moved this to In progress in Release 4.10.0 Jun 25, 2024
@wazuhci wazuhci moved this from In progress to On hold in Release 4.10.0 Jun 25, 2024
@CarlosALgit
Copy link
Member

Update Report

I've had issues trying to replicate the problem to see the modules displayed on the new 4.8.0 Dashboard. I'm currently in the process of understanding how the Docker deployment works.

@wazuhci wazuhci moved this from On hold to In progress in Release 4.10.0 Jun 26, 2024
@wazuhci wazuhci moved this from In progress to On hold in Release 4.10.0 Jun 27, 2024
@CarlosALgit
Copy link
Member

Update Report

I've been learning how to check that an integration is working correctly on a Wazuh AIO installed with the assistant.

Then I deployed the Docker environment activating - EXTENSIONS_VIRUSTOTAL=true on the docker-compose.yml file for the dashboard. Then, I checked the environment variables on the Dashboard container and it was setted to true:

bash-5.2$ printenv | grep EXTENSIONS_VIRUSTOTAL
EXTENSIONS_VIRUSTOTAL=true

Then I went to the manager container to check the ossec.conf file but the integration for VirusTotal does not appear.

I tried to follow the code flow but I have found it impossible to understand when the change is being made to ossec.conf in order to add the integration module.

@teddytpc1
Copy link
Member

teddytpc1 commented Jul 2, 2024

@Enaraque, the modules are now enabled by default from version 4.9.0. So, we should remove all these variables.

@wazuhci wazuhci moved this from On hold to In progress in Release 4.10.0 Jul 4, 2024
@wazuhci wazuhci moved this from In progress to Pending review in Release 4.10.0 Jul 4, 2024
@wazuhci wazuhci moved this from Pending review to Done in Release 4.10.0 Jul 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: Done
Development

Successfully merging a pull request may close this issue.

3 participants