Installing and Setting up OpenSearch-Dashboards

In the previous blog we have saw how to install and configure OpenSearch in Ubuntu. In this blog let’s install and configure OpenSearch-Dashboards, and linking with the OpenSearch.

For installing and setting up OpenSearch check out my previous blog here

What is OpenSearch-Dashboards?

OpenSearch Dashboards is a visualization and user interface tool that is typically used in conjunction with OpenSearch, an open-source search and analytics engine. OpenSearch Dashboards provides a web-based interface for interacting with and visualizing data stored in OpenSearch. Here are some of its main uses:

1. Data Visualization: With OpenSearch Dashboards, users may generate a wide range of visuals to aid in data analysis and comprehension, including graphs, charts, and maps. Dashboards that are configurable allow users to explore and engage with data.

2. Dashboard Creation: Custom dashboards that compile and show data from OpenSearch indexes may be designed and used by users. Dashboards are helpful for tracking important performance indicators, trends, and metrics in real time.

3. Search and Exploration: The robust search and exploration interface of OpenSearch Dashboards is included. To obtain insights, users may do intricate searches, apply filters, and delve deep into certain areas of their data.

4. Alerting and Monitoring: It frequently has alerting capabilities that let users set up notifications based on pre-established parameters. This is essential for keeping an eye on systems and getting alerts when particular thresholds are exceeded.

5. User Management: Administrators are able to restrict access to particular dashboards and data by using OpenSearch Dashboards’ user authentication and authorization features, which are based on user roles and permissions.

6. Integration with Other Tools: Its adaptability might be increased by integration with additional technologies and data sources. This might contain connectors and plugins for different data sources, which facilitate the import and analysis of a wide range of datasets.

7. Customization: OpenSearch Dashboards frequently offer a significant degree of customization, enabling users to adapt the interface and visuals to their own requirements. Using third-party plugins and designing unique visualizations are two examples of this.

8. Open Source Community: OpenSearch Dashboards benefits from community contributions and participation as it is a part of the open-source ecosystem. In addition to sharing dashboards and benefiting from the community’s experience, users may also help build the tool.

Installing and Setting up OpenSearch-Dashboards

Download OpenSearch from official website or else use package managers for apt to install as mentioned in documentation for other package manager refer to the documentation. Copy the link of the download button and use wget to install.

wget https://artifacts.opensearch.org/releases/bundle/opensearch-dashboards/2.11.1/opensearch-dashboards-2.11.1-linux-x64.deb

Unzip the downloaded file,

sudo dpkg -i opensearch-dashboards-2.11.1-linux-x64.deb

Reload and enable, opensearch. Start and check the status of Opensearch

sudo systemctl daemon-reload
sudo systemctl enable opensearch-dashboards
sudo systemctl start opensearch-dashboards
sudo systemctl status opensearch-dashboards

Edit opensearch-dashboards.yml file in /etc/opensearch-dashboards and add the following code.

server.port: 5601
server.host: "0.0.0.0"
opensearch.hosts: ["https://0.0.0.0:9200"]
opensearch.ssl.verificationMode: none
opensearch.username: "admin"
opensearch.password: "<Pass>"

Save the file and exit, now restart opensearch-dashboards.

sudo systemctl restart opensearch-dashboards

Now try to access the opensearch-dashboard, running on port 5601,

Login using the username and password supplied in yml configuration file.

In the next blog I will share, how to setup logstash to send logs to OpenSearch.

Subscribe to our YouTube channel: https://www.youtube.com/@CyberToolGuardian/featured

Follow us on Instagram:
https://instagram.com/cybertoolguardian

Check out the website:
https://cybertoolguardain.com


Comments

Post a Comment

Popular posts from this blog

Zeek Installation in Ubuntu

Image
What is Zeek? An open-source protocol analyzer and network security monitoring tool, Zeek was once known as Bro. It is intended to assist enterprises with real-time network traffic monitoring and analysis, offering information on network activity, potential security risks, and performance concerns. Due to its effectiveness in swiftly capturing and processing network data, Zeek is especially well-liked among cybersecurity experts and network managers. How to install Zeek in Ubuntu? Update and upgrade the Ubuntu using apt. sudo apt-get update sudo apt-get upgrade Download the Zeek source code from the official website ( https://zeek.org/get-zeek/ ). Zeek offical download page Install dependencies using the below command. sudo apt-get install cmake make gcc g++ flex bison libpcap-dev libssl-dev python3-dev swig zlib1g-dev Dependencies installation Once all the dependencies are installed change the directory to the path where the Zeek source code file is downloaded and unzip the file. cd D...
Read more

What is ELK and Installing ELK stack (elasticsearch, logstash, kibana) in Ubuntu

Image
   What is ELK Stack The ELK stack is a collection of three open-source tools — Elasticsearch, Logstash, and Kibana — that work together to collect, store, and analyze data. Here is how each tool works: Elasticsearch : Elasticsearch is a search and analytics engine that provides a distributed, real-time search and analytics platform. It stores data in a distributed index, which allows for fast, real-time search and analysis of data. Elasticsearch is highly scalable, and it can handle a large volume of data with ease. Logstash : Logstash is a data pipeline that collects, filters, and transforms data from different sources before sending it to Elasticsearch. It can collect data from different sources such as log files, databases, and message queues. Logstash can also perform data transformation and filtering to ensure that only the relevant data is sent to Elasticsearch. Kibana : Kibana is a data visualization tool that allows users to create dashboards, visualizations, and repo...
Read more

Sending Zeek logs to ELK using Filebeats

Image
Before sending logs we must modify local.zeek file and add the below line at the end of the file. @load policy/tuning/json-logs.zeek Use the find command to find local.zeek file. find / -name local.zeek local.zeek path Now copy the path and edit the file using nano and add the line. local.zeek Save and exit from editor, now check the configuration of zeekctl sudo zeekctl check zeekctl check Once the you get zeek scripts are ok, deploy zeekctl sudo zeekctl deploy zeekctl deploy Go to the zeek logs path directory which is /usr/local/zeek/logs/current. Check if logs are generated properly. logs Go to Kibana dashboard head over to integration section and search for zeek, in the integration page on bottom right go to “Also available in Beats”. You will be redirected to Filebeats Zeek integration page. Copy the commands from the Step1 and open new terminal window and run the commands. Which will download and extract the filebeats. Now edit the filebeat.yml file, change the paths to the zeek ...
Read more