Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Opensearch Dashboard Version : 2.19.1
Wazuh Indexer Version : 4.11.1
All is the latest version,
Describe the issue:
Hello, i want to use OpenSearch Dashboard to Read data inside Wazuh indexer, as far as i know, Wazuh Indexer is based on Opensearch Indexer so i wonder if i can connect the OpenSearch Dashboard directly to Wazuh Indexer.
Configuration:
I Deploy this using Docker Compose, here the OpenSearch Dashboard Settings:
services:
opensearch-dashboards:
image: opensearchproject/opensearch-dashboards:latest
hostname: opensearch-dashboards
ports:
- 5602:5601
expose:
- '5601'
environment:
- OPENSEARCH_HOSTS="https://wazuh1.indexer:9200"
volumes:
- ./config/wazuh_indexer_ssl_certs/wazuh.dashboard.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard.pem
- ./config/wazuh_indexer_ssl_certs/wazuh.dashboard-key.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard-key.pem
- ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-dashboard/certs/root-ca.pem
- ./config/wazuh_dashboard/opensearch_dashboards_1.yml:/usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
- ./config/wazuh_dashboard/wazuh.yml:/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
- wazuh-dashboard-config:/usr/share/wazuh-dashboard/data/wazuh/config
- wazuh-dashboard-custom:/usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
custom opensearch_dashboards_1.yml
for OpenSearch Dashboard (Based On Wazuh Dashboard opensearch_dashboards.yml
) :
server.host: 0.0.0.0
server.port: 5601
opensearch.hosts: https://wazuh1.indexer:9200
opensearch.ssl.verificationMode: certificate
opensearch.requestHeadersWhitelist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/usr/share/wazuh-dashboard/certs/wazuh-dashboard-key.pem"
server.ssl.certificate: "/usr/share/wazuh-dashboard/certs/wazuh-dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/usr/share/wazuh-dashboard/certs/root-ca.pem"]
# uiSettings.overrides.defaultRoute: /app/wz-home
Relevant Logs or Screenshots:
OpenSearch Dashboard Logs :
[ResponseError]: Response Error | type=log @timestamp=2025-03-22T08:09:57Z tags=["error","opensearch","data"] pid=1
[ResponseError]: Response Error | type=log @timestamp=2025-03-22T08:10:00Z tags=["error","opensearch","data"] pid=1
[ResponseError]: Response Error | type=log @timestamp=2025-03-22T08:10:02Z tags=["error","opensearch","data"] pid=1
[ResponseError]: Response Error | type=log @timestamp=2025-03-22T08:10:05Z tags=["error","opensearch","data"] pid=1
[ResponseError]: Response Error | type=log @timestamp=2025-03-22T08:10:07Z tags=["error","opensearch","data"] pid=1