Wazuh v3.3.1 - Kibana v6.3.1

Highlights for this version

• Added a new Angular.js factory to store the Wazuh app configuration values. Also this factory is being used by the pre-routes functions (resolves), this way we are sure about having the real configuration at any time. These pre-routes functions have been improved too. (#670)

• Added extended information for reports from reporting feature (#701)

• Tables have been improved. Now they are truncating long fields and adding a tooltip if needed (#671)

• CSV formatted files have been improved. Now they are showing a more human readable column names (#717, #726).

• Added/Modified some visualization titles (#728)

• Improved Discover perfomance when in background mode (#719)

• Reports from reporting feature have suffered a fully redesign (#701)

• Fixed the top menu API indicator when checking API connection and the manager/cluster information had been changed (#668)

• Fixed our logger module which was not writting logs the very first time Kibana is started neither after a log rotation (#667)

• Fixed a regular expression in the server side when parsing URLs before registering a new Wazuh API (#690)

• Fixed filters parsing when generating a report. It was not parsing negated filters as expected (#696)

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.3.1 - Kibana v6.3.0

Highlights for this version

• Improvements for latest app redesign (#652):
  • The Welcome tabs have been simplified, following a more Elastic design.
  • Added again the md-nav-bar component with refined styles and limited to specific sections.
  • The Settings > Welcome tab has been removed. You can use the nav bar to switch tabs.
  • Minor CSS adjustments and reordering.
• Small app UI improvements (#634):
  • Added link to Agents Preview on the Agents tab breadcrumbs.
  • Replaced the Generate report button with a smaller one.
  • Redesigned Management > Ruleset md-chips to look similar to Kibana filter pills.
  • Added agent information bar from Agents > General to Agents > Welcome too.
  • Refactored flex layout on Welcome tabs to fix a height visual bug.
  • Removed duplicated loading rings on the Agents tab.
• Improvements for app tables (#627):
  • Now the current page will be highlighted.
  • The gap has been fixed to the items per page value.
  • If there are no more pages for Next or Prev buttons, they will be hidden.
• Improvements for app health check (#637):
  • Improved design for the view.
  • The checks have been placed on a table, showing the current status of each one.
• Changes to our reporting feature (#639):
  • Now the generated reports will include tables for each section.
  • Added a parser for getting Elasticsearch data table responses.
  • The reporting feature is now a separated module, and the code has been refactored.
• Improvements for app tables pagination (#646).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.3.0 - Kibana v6.3.0

Highlights for this version

• Support for Elastic Stack v6.3.0 (#579 & #612 & #615).
• Brand-new Wazuh app redesign for the Monitoring tab (#581):
  • Refactored and optimized UI for these tabs, using a breadcrumbs-based navigability.
  • Used the same guidelines from the previous redesign for Overview and Agents tabs.
• New tab for Agents - Inventory (#582):
  • Get information about the agent host, such as installed packages, motherboard, operating system, etc.
  • This tab will appear if the agent has the syscollector wodle enabled.
• Brand-new extension - CIS-CAT Alerts (#601):
  • A new extension, disabled by default.
  • Visualize alerts related to the CIS-CAT benchmarks on the Overview and Agents tabs.
  • Get information about the last performed scan and its score.
• Several improvements for the Dev tools tab (#583 & #597):
  • Now you can insert queries using inline parameters, just like in a web browser.
  • You can combine inline parameters with JSON-like parameters.
  • If you use the same parameter on both methods with different values, the inline parameter has precedence over the other one.
  • The tab icon has been changed for a more appropriate one.
  • The Execute query button is now always placed on the first line of the query block.
• Refactoring for all app tables (#582):
  • Replaced the old wz-table directive with a new one, along with a new data factory.
  • Now the tables are built with a pagination system.
  • Much easier method for building tables for the app.
  • Performance and stability improvements when fetching API data.
  • Now you can see the total amount of items and the elapsed time.

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.3.1 - Kibana v6.2.4

This release comes with all the changes from the previous version, and the following additions and bugfixes:

Highlights for this version

• Support for Wazuh v3.3.1.

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.3.0 - Kibana v6.2.4

Highlights for this version

• Support for Wazuh v3.3.0.
• Brand-new Wazuh app redesign for the Settings tab (#570):
  • Refactored and optimized UI for these tabs, using a breadcrumbs-based navigability.
  • Used the same guidelines from the previous redesign for Overview and Agents tabs.
• Refactoring for Overview and Agents controllers (#564):
  • Reduced duplicated code by splitting it into separate files.
  • Code optimization for a better performance and maintainability.
  • Added new services to provide similar functionality between different app tabs.
• Added data.vulnerability.package.condition to the list of known fields (#566).
• Updated some backend API calls to include the app version in the request header (#560).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.4 - Kibana v6.2.4

Highlights for this version

• Support for Wazuh v3.2.4.
• Brand-new Wazuh app redesign for Overview and Agents tabs (#543):
  • Updated UI for these tabs using breadcrumbs.
  • New Welcome screen, presenting all the tabs to the user, with useful links to our documentation.
  • Overall design improved, adjusted font sizes and reduced HTML code.
  • This base will allow the app to increase its functionality in the future.
  • Removed the md-nav-bar component for a better user experience on small screens.
  • Improved app performance removing some CSS effects from some components, such as buttons.
• New filter for agent version on the Agents Preview tab (#537).
• New filter for cluster node on the Agents Preview tab (#538).
• New functionality - Reporting (#510):
  • Generate PDF logs on the Overview and Agents tabs, with the new button next to Panels and Discover.
  • The report will contain the current visualizations from the tab where you generated it.
  • List all your generated reports, download or deleted them at the new Management/Reporting tab.
  • Warning: If you leave the tab while generating a report, the process will be aborted.
• Added warning/error messages about the total RAM on the server side (#502):
  • None of this messages will prevent the user from accessing the app, it's just a recommendation.
  • If your server has less than 2GB of RAM, you'll get an error message when opening the app.
  • If your server has between 2GB and 3GB of RAM, you'll get a warning message.
  • If your server has more than 3GB of RAM, you won't get any kind of message.
• Refactoring and added loading bar to Manager Logs and Groups tabs (#505).
• Added more Syscheck options to Management/Agents configuration tabs (#509).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.3 - Kibana v6.2.4

Highlights for this version

• Support for Wazuh v3.2.3.
• New functionality - Reporting (#510):
  • Generate PDF logs on the Overview and Agents tabs, with the new button next to Panels and Discover.
  • The report will contain the current visualizations from the tab where you generated it.
  • List all your generated reports, download or deleted them at the new Management/Reporting tab.
  • Warning: If you leave the tab while generating a report, the process will be aborted.
• Added warning/error messages about the total RAM on the server side (#502):
  • None of this messages will prevent the user from accessing the app, it's just a recommendation.
  • If your server has less than 2GB of RAM, you'll get an error message when opening the app.
  • If your server has between 2GB and 3GB of RAM, you'll get a warning message.
  • If your server has more than 3GB of RAM, you won't get any kind of message.
• Refactoring and added loading bar to Manager Logs and Groups tabs (#505).
• Added more Syscheck options to Management/Agents configuration tabs (#509).
• Brand-new extension - GDPR Alerts (#453):
  • A new extension, enabled by default.
  • Visualize alerts related to the GDPR compliance on the Overview and Agents tabs.
  • The Ruleset tab has been updated to include GDPR filters on the Rules subtab.
• Brand-new Management tab - Monitoring (#490):
  • Visualize your Wazuh cluster, both master and clients.
    • Get the current cluster configuration.
    • Nodes listing, sorting, searching, etc.
  • Get a more in-depth cluster status thanks to the newly added Timelion visualizations.
  • The Detail view gives you a summary of the node's healthcheck.
• Brand-new tab - Dev tools (#449):
  • Find it on the top navbar, next to Discover.
  • Execute Wazuh API requests directly from the app.
  • This tab uses your currently selected API from Settings.
  • You can type different API requests on the input window, select one with the cursor, and click on the Play button to execute it.
  • You can also type comments on the input window.
• More improvements for the Manager/Ruleset tab (#446):
  • A new colour palette for regex, order and rule description arguments.
  • Added return to List view on Ruleset button while on Detail view.
  • Fixed line height on all table headers.
  • Removed unused, old code from Ruleset controllers.
• Added option on config.yml to enable/disable the wazuh-monitoring index (#441):
  • Configure the frequency time to generate new indices.
  • The default frequency time has been increased to 1 hour.
  • When disabled, useful metrics will appear on Overview/General replacing the Agent status visualization.
• Added CSV exporting button to the app (#431):
  • Implemented new logic to fetch data from the Wazuh API and download it in CSV format.
  • Currently available for the Ruleset, Logs and Groups sections on the Manager tab and also the Agents tab.
• More refactoring to the app backend (#439):
  • Standardized error output from the server side.
  • Drastically reduced the error management logic on the client side.
  • Applied the Facade pattern when importing/exporting modules.
  • Deleted unused/deprecated/useless methods both from server and client side.
  • Some optimizations to variable type usages.
• Refactoring to Kibana filters management (#452 & #459):
  • Added new class to build queries from the base query.
  • The filter management is being done on controllers instead of the discover directive.
  • Now we are emitting specific events whenever we are fetching data or communicating to the discover directive.
  • The number of useless requests to fetch data has been reduced.
  • The synchronization actions are working as expected regardless the amount of data and/or the number of machine resources.
  • Fixed several bugs about filter usage and transition to different app tabs.
• Added confirmation message when the user deletes an API entry on Settings/API (#428).
• Added support for filters on the Manager/Logs tab when realtime is enabled (#433).
• Added more filter options to the Detail view on Manager/Ruleset (#434).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.2 - Kibana v6.2.4

Highlights for this version

• Support for Wazuh v3.2.2.
• Refactoring on visualizations use and management (#397):
  • Visualizations are no longer stored on an index, they're built and loaded on demand when needed to render the interface.
  • Refactoring on the whole app source code to use the import/export paradigm.
  • Removed old functions and variables from the old visualization management logic.
  • Removed cron task to clean remaining visualizations since it's no longer needed.
  • Some Kibana functions and modules have been overridden in order to make this refactoring work.
    • This change is not intrusive in any case.
• New redesign for the Manager/Ruleset tab (#420):
  • Rules and decoders list now divided into two different sections: List view and Detail view.
  • Removed old expandable tables to move the rule/decoder information into a new space.
  • Enable different filters on the detail view for a better search on the list view.
  • New table for related rules or decoders.
  • And finally, a bunch of minor design enhancements to the whole app.
• Added a copyright notice to the whole app source code (#395).
• Updated .gitignore with the Node template (#395).
• Added new module to the package.json file, rison (#404).
• Added the errorHandler service to the blank screen scenario (#413):
  • Now the exact error message will be shown to the user, instead of raw JSON content.
• Added new option on the config.yml file to disable the new X-Pack RBAC capabilities to filter index-patterns (#417).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.1 - Kibana v6.2.4

Highlights for this version

• Support for Elastic Stack v6.2.4.
• App server fully refactored (#360):
  • Added new classes, reduced the amount of code, removed unused functions, and several optimizations.
  • Now the app follows a more ES6 code style on multiple modules.
  • Overview/Agents visualizations have been divided into separated files and folders.
  • Now the app can use the default index defined on the /ect/kibana/kibana.yml file.
  • Better error handling for the visualizations directive.
  • Added a cron job to delete remaining visualizations on the .kibana index if so.
  • Also, we've added some changes when using the X-Pack plugin:
    • Better management of users and roles in order to use the app capabilities.
    • Prevents app loading if the currently logged user has no access to any index pattern.
• Added the errorHandler service to the dataHandler factory (#340).
• Added Syscollector section to Manager/Agents Configuration tabs (#359).
• Added cluster.name field to the wazuh-monitoring index (#377).
• Refactoring on visualizations use and management (#397):
  • Visualizations are no longer stored on an index, they're built and loaded on demand when needed to render the interface.
  • Refactoring on the whole app source code to use the import/export paradigm.
  • Removed old functions and variables from the old visualization management logic.
  • Removed cron task to clean remaining visualizations since it's no longer needed.
  • Some Kibana functions and modules have been overridden in order to make this refactoring work.
    • This change is not intrusive in any case.
• New redesign for the Manager/Ruleset tab (#420):
  • Rules and decoders list now divided into two different sections: List view and Detail view.
  • Removed old expandable tables to move the rule/decoder information into a new space.
  • Enable different filters on the detail view for a better search on the list view.
  • New table for related rules or decoders.
  • And finally, a bunch of minor design enhancements to the whole app.
• Added a copyright notice to the whole app source code (#395).
• Updated .gitignore with the Node template (#395).
• Added new module to the package.json file, rison (#404).
• Added the errorHandler service to the blank screen scenario (#413):
  • Now the exact error message will be shown to the user, instead of raw JSON content.
• Added new option on the config.yml file to disable the new X-Pack RBAC capabilities to filter index-patterns (#417).

Take a look at the changelog file for a complete list of what's new on this release.

Wazuh v3.2.1 - Kibana v6.2.2

This release comes with all the changes from the previous version, plus a bunch of new additions an bugfixes:

Highlights for this version

• Support for Wazuh 3.2.1.
• New design for the Manager/Groups tab (#295).
• New design for the Manager/Configuration tab (#297).
• New design of agents statistics for the Agents tab (#299).
• Added information ribbon into Overview/Agent SCAP tabs (#303).
• Added information ribbon into Overview/Agent VirusTotal tabs (#306).
• Added information ribbon into Overview AWS tab (#306).
• New logging system (#307).
• Better cookies handling (#308).
• New design for the Agents/Configuration tab (#310).
• Added "group" column on the agents list in Agents (#312).
• New option for the config.yml file, ip.selector (#313).
• More CSS cleanup and reordering (#315).
• New design for the top navbar (#326).
• New design for the wz-chip component to follow the new Wazuh app guidelines (#323).
• Added more descriptive error messages when the user inserts bad credentials on the Add new API form in the Settings tab (#331).
• Added a new CSS class to truncate overflowing text on tables and metric ribbons (#332).

Take a look at the changelog file for a complete list of what's new on this release.