Connect the Wazuh App with the API¶
In this section, we will show you how to register the Wazuh API (installed on the Wazuh server) with the Wazuh App in Kibana:
Open a web browser and go to the Elastic Stack server’s IP address on port 5601 (default Kibana port). Then, from the left menu, go to the Wazuh App.
Add new API.
Before filling out the fields, go to your Wazuh server and, using the command prompt as root, replace the default credentials with your desired username where myUsername is shown below to protect your Wazuh API.
# cd /var/ossec/api/configuration/auth # node htpasswd -c user myUserName
Do not forget to restart the API to apply the changes with these commands:# systemctl restart wazuh-api # service wazuh-api restart
Fill in the Username and Password fields with the credentials you created in the previous step. Enter
http://MANAGER_IPfor the URL where
MANAGER_IPis the real IP address of the Wazuh server and enter “55000” for the Port.
If you have followed the Wazuh Documentation for Nginx, the URL must be set as