Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update troubleshooting.md #110

Merged
merged 6 commits into from
Dec 15, 2023
Merged

Update troubleshooting.md #110

merged 6 commits into from
Dec 15, 2023

Conversation

aarz-snl
Copy link
Collaborator

@aarz-snl aarz-snl commented Dec 15, 2023

We have decided to remove the 'old password' logic from the install script as elastic already provides the ability to change the password to whatever you want using the API.

This update to the toubleshooting.md provides guidance on changing the password to the username 'elastic'

I tested this on ls1 in our test environment. Please feel free to test. You dont need to un-install or anything like that. Just run the command. You may need to run it with administrative priv's if your regular account doesn't have access to /opt/lme. the command needs to be able to utilize the certs.

Copy link
Contributor

@llwaterhouse llwaterhouse left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for writing out the instructions on how to change the elastic password. Would the same instructions apply if they wanted to change the kibana or logstash passwords?

@aarz-snl
Copy link
Collaborator Author

Thank you for writing out the instructions on how to change the elastic password. Would the same instructions apply if they wanted to change the kibana or logstash passwords?

I believe it's the same -- you would just use

https://127.0.0.1:9200/_security/user/kibana_system/_password

instead of

https://127.0.0.1:9200/_security/user/elastic/_password

And so on. I would need to test to verify what happens when you do that though

Copy link
Collaborator

@mitchelbaker-cisa mitchelbaker-cisa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changed elastic password successfully after running the curl req

@mitchelbaker-cisa mitchelbaker-cisa merged commit 84f419a into release-1.3.0 Dec 15, 2023
3 checks passed
mitchelbaker-cisa added a commit that referenced this pull request Dec 20, 2023
* added branch naming conventions to Contributing, fixed typo (#85)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* adding line change from clint's old pr

* Release 1.2.0 MERGE INTO MAIN  (#101) (#102)

* Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file

* Upgrade ELK stack to 8.11.1 (#86)

* Update ELK to 8.11.1

* Pull images before starting cluster

* Pull images before deploylme

* Upgrade versions in the live docker compose upon upgrade

* Pull new images before deploying new stack

* Globalize version variable

* Adding the following:
 - get_latest_version function
 - pulling version from this function
 - old password reading text update to reduce confusion
 - print statements in upgrade from 1.0 -> 1.2
 - sleep so it doesn't fail if docker does a slow removal

* Update the version in dashboard_update.sh

---------




* Changed ELK Stack from deploy.sh update to deploy.sh upgrade

---------

Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: mreeve.snl <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>

* Add .gitattributes file to exclude the testing folder from releases. (#105)

* Updated dashboard Process Explorer file downloads panels

* Update workflow file to include linting and static security scans (#106)

* Update main.yml to add linting

* Update main.yml

* Update troubleshooting.md with instructions on how to change elastic password (#110)

* Delete Chapter 4 Files/dashboards/user_security.ndjson

* Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson

* Updated dashboards

* Remove elastic user password prompt from deploy.sh (#107)

* Remove elastic password prompt and condition in setpasswords()

* create displaycredentials() fnc, link troubleshooting.md documentation at end of script

* update deploy.sh to link to changing elastic username/password in troubleshooting.md

* updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (#117)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* imported new dashboard

* Rearrange sysmon dashboard  (#115)

* updating sysmon dashboard

* adding line change from clint's old pr

* Add .gitattributes file to exclude the testing folder from releases. (#105)

* updating sysmon dashboard

---------

Co-authored-by: mreeve-snl <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>

* Healthcheckoverview dashboard update (#120)

* imported new dashboard

* updated healthcheck dashboard

* Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (#121)

removed alerting dashboard from this PR healthcheck PR

---------

Co-authored-by: ddiabe <[email protected]>
Co-authored-by: ddiabe <[email protected]>

* adding push so that I can track this branch

* pushing all changes as documented in the PR: 112

* Updated Healthcheck Overview Dashboard panels

---------

Co-authored-by: Linda Waterhouse <[email protected]>
Co-authored-by: Linda Lovero-Waterhouse <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>
Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>
Co-authored-by: Andrew Arz <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: Grant (SNL) <[email protected]>
Co-authored-by: Connor <[email protected]>
Co-authored-by: ddiabe <[email protected]>
@aarz-snl aarz-snl deleted the password-change branch December 21, 2023 13:53
cbaxley added a commit that referenced this pull request Dec 26, 2023
* added branch naming conventions to Contributing, fixed typo (#85)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* adding line change from clint's old pr

* Release 1.2.0 MERGE INTO MAIN  (#101) (#102)

* Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file

* Upgrade ELK stack to 8.11.1 (#86)

* Update ELK to 8.11.1

* Pull images before starting cluster

* Pull images before deploylme

* Upgrade versions in the live docker compose upon upgrade

* Pull new images before deploying new stack

* Globalize version variable

* Adding the following:
 - get_latest_version function
 - pulling version from this function
 - old password reading text update to reduce confusion
 - print statements in upgrade from 1.0 -> 1.2
 - sleep so it doesn't fail if docker does a slow removal

* Update the version in dashboard_update.sh

---------




* Changed ELK Stack from deploy.sh update to deploy.sh upgrade

---------

Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: mreeve.snl <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>

* Add .gitattributes file to exclude the testing folder from releases. (#105)

* Updated dashboard Process Explorer file downloads panels

* Update workflow file to include linting and static security scans (#106)

* Update main.yml to add linting

* Update main.yml

* Update troubleshooting.md with instructions on how to change elastic password (#110)

* Delete Chapter 4 Files/dashboards/user_security.ndjson

* Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson

* Updated dashboards

* Remove elastic user password prompt from deploy.sh (#107)

* Remove elastic password prompt and condition in setpasswords()

* create displaycredentials() fnc, link troubleshooting.md documentation at end of script

* update deploy.sh to link to changing elastic username/password in troubleshooting.md

* updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (#117)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* imported new dashboard

* Rearrange sysmon dashboard  (#115)

* updating sysmon dashboard

* adding line change from clint's old pr

* Add .gitattributes file to exclude the testing folder from releases. (#105)

* updating sysmon dashboard

---------

Co-authored-by: mreeve-snl <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>

* Healthcheckoverview dashboard update (#120)

* imported new dashboard

* updated healthcheck dashboard

* Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (#121)

removed alerting dashboard from this PR healthcheck PR

---------

Co-authored-by: ddiabe <[email protected]>
Co-authored-by: ddiabe <[email protected]>

* adding push so that I can track this branch

* pushing all changes as documented in the PR: 112

* Updated Healthcheck Overview Dashboard panels

---------

Co-authored-by: Linda Waterhouse <[email protected]>
Co-authored-by: Linda Lovero-Waterhouse <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>
Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>
Co-authored-by: Andrew Arz <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: Grant (SNL) <[email protected]>
Co-authored-by: Connor <[email protected]>
Co-authored-by: ddiabe <[email protected]>
cbaxley added a commit that referenced this pull request Jan 10, 2024
* added branch naming conventions to Contributing, fixed typo (#85)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* adding line change from clint's old pr

* Release 1.2.0 MERGE INTO MAIN  (#101) (#102)

* Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file

* Upgrade ELK stack to 8.11.1 (#86)

* Update ELK to 8.11.1

* Pull images before starting cluster

* Pull images before deploylme

* Upgrade versions in the live docker compose upon upgrade

* Pull new images before deploying new stack

* Globalize version variable

* Adding the following:
 - get_latest_version function
 - pulling version from this function
 - old password reading text update to reduce confusion
 - print statements in upgrade from 1.0 -> 1.2
 - sleep so it doesn't fail if docker does a slow removal

* Update the version in dashboard_update.sh

---------




* Changed ELK Stack from deploy.sh update to deploy.sh upgrade

---------

Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: mreeve.snl <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>

* Add .gitattributes file to exclude the testing folder from releases. (#105)

* Updated dashboard Process Explorer file downloads panels

* Update workflow file to include linting and static security scans (#106)

* Update main.yml to add linting

* Update main.yml

* Update troubleshooting.md with instructions on how to change elastic password (#110)

* Delete Chapter 4 Files/dashboards/user_security.ndjson

* Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson

* Updated dashboards

* Remove elastic user password prompt from deploy.sh (#107)

* Remove elastic password prompt and condition in setpasswords()

* create displaycredentials() fnc, link troubleshooting.md documentation at end of script

* update deploy.sh to link to changing elastic username/password in troubleshooting.md

* updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (#117)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* imported new dashboard

* Rearrange sysmon dashboard  (#115)

* updating sysmon dashboard

* adding line change from clint's old pr

* Add .gitattributes file to exclude the testing folder from releases. (#105)

* updating sysmon dashboard

---------

Co-authored-by: mreeve-snl <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>

* Healthcheckoverview dashboard update (#120)

* imported new dashboard

* updated healthcheck dashboard

* Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (#121)

removed alerting dashboard from this PR healthcheck PR

---------

Co-authored-by: ddiabe <[email protected]>
Co-authored-by: ddiabe <[email protected]>

* adding push so that I can track this branch

* pushing all changes as documented in the PR: 112

* Updated Healthcheck Overview Dashboard panels

---------

Co-authored-by: Linda Waterhouse <[email protected]>
Co-authored-by: Linda Lovero-Waterhouse <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>
Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>
Co-authored-by: Andrew Arz <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: Grant (SNL) <[email protected]>
Co-authored-by: Connor <[email protected]>
Co-authored-by: ddiabe <[email protected]>
mitchelbaker-cisa added a commit to mitchelbaker-cisa/LME that referenced this pull request Jan 31, 2024
* added branch naming conventions to Contributing, fixed typo (cisagov#85)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* adding line change from clint's old pr

* Release 1.2.0 MERGE INTO MAIN  (cisagov#101) (cisagov#102)

* Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file

* Upgrade ELK stack to 8.11.1 (cisagov#86)

* Update ELK to 8.11.1

* Pull images before starting cluster

* Pull images before deploylme

* Upgrade versions in the live docker compose upon upgrade

* Pull new images before deploying new stack

* Globalize version variable

* Adding the following:
 - get_latest_version function
 - pulling version from this function
 - old password reading text update to reduce confusion
 - print statements in upgrade from 1.0 -> 1.2
 - sleep so it doesn't fail if docker does a slow removal

* Update the version in dashboard_update.sh

---------




* Changed ELK Stack from deploy.sh update to deploy.sh upgrade

---------

Co-authored-by: mitchelbaker-cisa <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: mreeve.snl <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>

* Add .gitattributes file to exclude the testing folder from releases. (cisagov#105)

* Updated dashboard Process Explorer file downloads panels

* Update workflow file to include linting and static security scans (cisagov#106)

* Update main.yml to add linting

* Update main.yml

* Update troubleshooting.md with instructions on how to change elastic password (cisagov#110)

* Delete Chapter 4 Files/dashboards/user_security.ndjson

* Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson

* Updated dashboards

* Remove elastic user password prompt from deploy.sh (cisagov#107)

* Remove elastic password prompt and condition in setpasswords()

* create displaycredentials() fnc, link troubleshooting.md documentation at end of script

* update deploy.sh to link to changing elastic username/password in troubleshooting.md

* updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (cisagov#117)

Co-authored-by: Linda Lovero-Waterhouse <[email protected]>

* imported new dashboard

* Rearrange sysmon dashboard  (cisagov#115)

* updating sysmon dashboard

* adding line change from clint's old pr

* Add .gitattributes file to exclude the testing folder from releases. (cisagov#105)

* updating sysmon dashboard

---------

Co-authored-by: mreeve-snl <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>

* Healthcheckoverview dashboard update (cisagov#120)

* imported new dashboard

* updated healthcheck dashboard

* Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (cisagov#121)

removed alerting dashboard from this PR healthcheck PR

---------

Co-authored-by: ddiabe <[email protected]>
Co-authored-by: ddiabe <[email protected]>

* adding push so that I can track this branch

* pushing all changes as documented in the PR: 112

* Updated Healthcheck Overview Dashboard panels

---------

Co-authored-by: Linda Waterhouse <[email protected]>
Co-authored-by: Linda Lovero-Waterhouse <[email protected]>
Co-authored-by: mreeve-snl <[email protected]>
Co-authored-by: Alden Hilton <[email protected]>
Co-authored-by: Rishi Aggarwal <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: Clint Baxley <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: rishagg01 <[email protected]>
Co-authored-by: Michael Reeves <[email protected]>
Co-authored-by: Andrew Arz <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Co-authored-by: Grant (SNL) <[email protected]>
Co-authored-by: Connor <[email protected]>
Co-authored-by: ddiabe <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: ✅ Done
Development

Successfully merging this pull request may close these issues.

3 participants