The Settings page allows you to configure and customize your Wazuh app experience. This section is automatically opened the first time you open the app in order to configure your first Wazuh API credentials, so the app can work properly. There are multiple options to configure on Settings, such as:
- API credentials
- Index pattern
Each option is described on the following sections below.
In this section, you can list all your inserted API credentials. The yellow star icon indicates the currently used API to show information on the app. Each entry has multiple available actions to manage it. Keep in mind that a working API is needed in order to add or edit an entry. Check your API connection status prior to adding them to the app.
Mark as selected
Select the API you want to use to filter the alerts on Overview and Agents, and show cluster information on Management.
The Mark as selected option only applies to your browser, and it’s stored in a cookie. Multiple users can select different APIs on their own Internet browsers.
Check if the app can communicate with the API. An error message will appear indicating the reason if there is a connection problem.
Delete an API entry if it’s not used anymore.
If you’ve changed your API credentials, you can modify the entry so you can continue using the API.
Wazuh provides multiple integrations and capabilities to monitor and analyze your hosts. If you’re using some of them, you can enable multiple extensions on the app to visualize tailored dashboards, which provide rich and useful information. Some of these extensions are disabled by default because you have to previously enable them on your manager configuration in order to generate alerts.
The app provides the following extensions:
The selected extensions are stored in a browser cookie. Multiple users can select different extensions on their own Internet browsers.
The default extensions configuration can be customized for newly inserted APIs. You can read more about it on the Configuration file section.
The index pattern functionality is completely described at the Index pattern selector section.
You can take a quick look to the full Wazuh app configuration file here. The documentation for the
config.yml file can be found on the Configuration file section.
The Wazuh app stores log information on the
/usr/share/kibana/optimize/wazuh-logs/wazuhapp.log file. This logs can be helpful for troubleshooting purposes. The Logs section allows you to check the last 20 log messages along with its date and severity level.
If you want to check older log messages, you can open the
wazuhapp.log file with your preferred text editor on a terminal.