SELKS icon indicating copy to clipboard operation
SELKS copied to clipboard

Upgrade Elasticsearch/Kibana

Open Koploseus opened this issue 6 years ago • 8 comments

I want to install the wazuh plugin witch is not compatible with the current version of Kibana (6.8.3)

How can we upgrade Ela and Kibana without breaking SELKS ?

Thanks

Koploseus avatar Sep 24 '19 14:09 Koploseus

Which version of ELK is needed for wazuh?

pevma avatar Sep 24 '19 14:09 pevma

At leat 7.2.0 Here's the link : https://github.com/wazuh/wazuh-kibana-app At the end you will find the kibana version according to the wazuh plugin version

Koploseus avatar Sep 24 '19 14:09 Koploseus

I've seen/heard of it running on lower ELK versions too mainly 6.x or is it no longer supported ?

pevma avatar Sep 24 '19 14:09 pevma

Well i think its no longer supported, this is the error that i get

`/usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.9.3_6.8.1.zip

Attempting to transfer from https://packages.wazuh.com/wazuhapp/wazuhapp-3.9.3_6.8.1.zip

Transferring 21660893 bytes.................... Transfer complete Retrieving metadata from plugin archive Extracting plugin archive Extraction complete Plugin installation was unsuccessful due to error "Plugin wazuh [6.8.1] is incompatible with Kibana [6.8.3]" `

Koploseus avatar Sep 24 '19 14:09 Koploseus

Any news ? :)

Koploseus avatar Sep 25 '19 13:09 Koploseus

Some of the tools included in SELKS do not support the ELK 7.x stack yet - so we would need to evaluate the impact first i suspect.

pevma avatar Sep 25 '19 19:09 pevma

Ok, if i can do anything, tell me

Koploseus avatar Sep 26 '19 08:09 Koploseus

Never mind, i am using Elastic beat now :)

But i will still be interested about upgrading ELK

Koploseus avatar Oct 01 '19 11:10 Koploseus