-
Notifications
You must be signed in to change notification settings - Fork 84
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update troubleshooting.md #110
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for writing out the instructions on how to change the elastic password. Would the same instructions apply if they wanted to change the kibana or logstash passwords?
I believe it's the same -- you would just use https://127.0.0.1:9200/_security/user/kibana_system/_password instead of https://127.0.0.1:9200/_security/user/elastic/_password And so on. I would need to test to verify what happens when you do that though |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changed elastic password successfully after running the curl req
* added branch naming conventions to Contributing, fixed typo (#85) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * adding line change from clint's old pr * Release 1.2.0 MERGE INTO MAIN (#101) (#102) * Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file * Upgrade ELK stack to 8.11.1 (#86) * Update ELK to 8.11.1 * Pull images before starting cluster * Pull images before deploylme * Upgrade versions in the live docker compose upon upgrade * Pull new images before deploying new stack * Globalize version variable * Adding the following: - get_latest_version function - pulling version from this function - old password reading text update to reduce confusion - print statements in upgrade from 1.0 -> 1.2 - sleep so it doesn't fail if docker does a slow removal * Update the version in dashboard_update.sh --------- * Changed ELK Stack from deploy.sh update to deploy.sh upgrade --------- Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: mreeve.snl <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> * Add .gitattributes file to exclude the testing folder from releases. (#105) * Updated dashboard Process Explorer file downloads panels * Update workflow file to include linting and static security scans (#106) * Update main.yml to add linting * Update main.yml * Update troubleshooting.md with instructions on how to change elastic password (#110) * Delete Chapter 4 Files/dashboards/user_security.ndjson * Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson * Updated dashboards * Remove elastic user password prompt from deploy.sh (#107) * Remove elastic password prompt and condition in setpasswords() * create displaycredentials() fnc, link troubleshooting.md documentation at end of script * update deploy.sh to link to changing elastic username/password in troubleshooting.md * updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (#117) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * imported new dashboard * Rearrange sysmon dashboard (#115) * updating sysmon dashboard * adding line change from clint's old pr * Add .gitattributes file to exclude the testing folder from releases. (#105) * updating sysmon dashboard --------- Co-authored-by: mreeve-snl <[email protected]> Co-authored-by: Alden Hilton <[email protected]> * Healthcheckoverview dashboard update (#120) * imported new dashboard * updated healthcheck dashboard * Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (#121) removed alerting dashboard from this PR healthcheck PR --------- Co-authored-by: ddiabe <[email protected]> Co-authored-by: ddiabe <[email protected]> * adding push so that I can track this branch * pushing all changes as documented in the PR: 112 * Updated Healthcheck Overview Dashboard panels --------- Co-authored-by: Linda Waterhouse <[email protected]> Co-authored-by: Linda Lovero-Waterhouse <[email protected]> Co-authored-by: Alden Hilton <[email protected]> Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> Co-authored-by: Andrew Arz <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: Grant (SNL) <[email protected]> Co-authored-by: Connor <[email protected]> Co-authored-by: ddiabe <[email protected]>
* added branch naming conventions to Contributing, fixed typo (#85) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * adding line change from clint's old pr * Release 1.2.0 MERGE INTO MAIN (#101) (#102) * Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file * Upgrade ELK stack to 8.11.1 (#86) * Update ELK to 8.11.1 * Pull images before starting cluster * Pull images before deploylme * Upgrade versions in the live docker compose upon upgrade * Pull new images before deploying new stack * Globalize version variable * Adding the following: - get_latest_version function - pulling version from this function - old password reading text update to reduce confusion - print statements in upgrade from 1.0 -> 1.2 - sleep so it doesn't fail if docker does a slow removal * Update the version in dashboard_update.sh --------- * Changed ELK Stack from deploy.sh update to deploy.sh upgrade --------- Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: mreeve.snl <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> * Add .gitattributes file to exclude the testing folder from releases. (#105) * Updated dashboard Process Explorer file downloads panels * Update workflow file to include linting and static security scans (#106) * Update main.yml to add linting * Update main.yml * Update troubleshooting.md with instructions on how to change elastic password (#110) * Delete Chapter 4 Files/dashboards/user_security.ndjson * Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson * Updated dashboards * Remove elastic user password prompt from deploy.sh (#107) * Remove elastic password prompt and condition in setpasswords() * create displaycredentials() fnc, link troubleshooting.md documentation at end of script * update deploy.sh to link to changing elastic username/password in troubleshooting.md * updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (#117) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * imported new dashboard * Rearrange sysmon dashboard (#115) * updating sysmon dashboard * adding line change from clint's old pr * Add .gitattributes file to exclude the testing folder from releases. (#105) * updating sysmon dashboard --------- Co-authored-by: mreeve-snl <[email protected]> Co-authored-by: Alden Hilton <[email protected]> * Healthcheckoverview dashboard update (#120) * imported new dashboard * updated healthcheck dashboard * Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (#121) removed alerting dashboard from this PR healthcheck PR --------- Co-authored-by: ddiabe <[email protected]> Co-authored-by: ddiabe <[email protected]> * adding push so that I can track this branch * pushing all changes as documented in the PR: 112 * Updated Healthcheck Overview Dashboard panels --------- Co-authored-by: Linda Waterhouse <[email protected]> Co-authored-by: Linda Lovero-Waterhouse <[email protected]> Co-authored-by: Alden Hilton <[email protected]> Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> Co-authored-by: Andrew Arz <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: Grant (SNL) <[email protected]> Co-authored-by: Connor <[email protected]> Co-authored-by: ddiabe <[email protected]>
* added branch naming conventions to Contributing, fixed typo (#85) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * adding line change from clint's old pr * Release 1.2.0 MERGE INTO MAIN (#101) (#102) * Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file * Upgrade ELK stack to 8.11.1 (#86) * Update ELK to 8.11.1 * Pull images before starting cluster * Pull images before deploylme * Upgrade versions in the live docker compose upon upgrade * Pull new images before deploying new stack * Globalize version variable * Adding the following: - get_latest_version function - pulling version from this function - old password reading text update to reduce confusion - print statements in upgrade from 1.0 -> 1.2 - sleep so it doesn't fail if docker does a slow removal * Update the version in dashboard_update.sh --------- * Changed ELK Stack from deploy.sh update to deploy.sh upgrade --------- Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: mreeve.snl <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> * Add .gitattributes file to exclude the testing folder from releases. (#105) * Updated dashboard Process Explorer file downloads panels * Update workflow file to include linting and static security scans (#106) * Update main.yml to add linting * Update main.yml * Update troubleshooting.md with instructions on how to change elastic password (#110) * Delete Chapter 4 Files/dashboards/user_security.ndjson * Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson * Updated dashboards * Remove elastic user password prompt from deploy.sh (#107) * Remove elastic password prompt and condition in setpasswords() * create displaycredentials() fnc, link troubleshooting.md documentation at end of script * update deploy.sh to link to changing elastic username/password in troubleshooting.md * updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (#117) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * imported new dashboard * Rearrange sysmon dashboard (#115) * updating sysmon dashboard * adding line change from clint's old pr * Add .gitattributes file to exclude the testing folder from releases. (#105) * updating sysmon dashboard --------- Co-authored-by: mreeve-snl <[email protected]> Co-authored-by: Alden Hilton <[email protected]> * Healthcheckoverview dashboard update (#120) * imported new dashboard * updated healthcheck dashboard * Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (#121) removed alerting dashboard from this PR healthcheck PR --------- Co-authored-by: ddiabe <[email protected]> Co-authored-by: ddiabe <[email protected]> * adding push so that I can track this branch * pushing all changes as documented in the PR: 112 * Updated Healthcheck Overview Dashboard panels --------- Co-authored-by: Linda Waterhouse <[email protected]> Co-authored-by: Linda Lovero-Waterhouse <[email protected]> Co-authored-by: Alden Hilton <[email protected]> Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> Co-authored-by: Andrew Arz <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: Grant (SNL) <[email protected]> Co-authored-by: Connor <[email protected]> Co-authored-by: ddiabe <[email protected]>
* added branch naming conventions to Contributing, fixed typo (cisagov#85) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * adding line change from clint's old pr * Release 1.2.0 MERGE INTO MAIN (cisagov#101) (cisagov#102) * Added instructions to update from Release 1.1.0 to Release 1.2.0 to upgrading.md file * Upgrade ELK stack to 8.11.1 (cisagov#86) * Update ELK to 8.11.1 * Pull images before starting cluster * Pull images before deploylme * Upgrade versions in the live docker compose upon upgrade * Pull new images before deploying new stack * Globalize version variable * Adding the following: - get_latest_version function - pulling version from this function - old password reading text update to reduce confusion - print statements in upgrade from 1.0 -> 1.2 - sleep so it doesn't fail if docker does a slow removal * Update the version in dashboard_update.sh --------- * Changed ELK Stack from deploy.sh update to deploy.sh upgrade --------- Co-authored-by: mitchelbaker-cisa <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: mreeve.snl <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> * Add .gitattributes file to exclude the testing folder from releases. (cisagov#105) * Updated dashboard Process Explorer file downloads panels * Update workflow file to include linting and static security scans (cisagov#106) * Update main.yml to add linting * Update main.yml * Update troubleshooting.md with instructions on how to change elastic password (cisagov#110) * Delete Chapter 4 Files/dashboards/user_security.ndjson * Delete Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson * Updated dashboards * Remove elastic user password prompt from deploy.sh (cisagov#107) * Remove elastic password prompt and condition in setpasswords() * create displaycredentials() fnc, link troubleshooting.md documentation at end of script * update deploy.sh to link to changing elastic username/password in troubleshooting.md * updated upgrading.md for release 1.3.0 and fixed link in chapter3.md (cisagov#117) Co-authored-by: Linda Lovero-Waterhouse <[email protected]> * imported new dashboard * Rearrange sysmon dashboard (cisagov#115) * updating sysmon dashboard * adding line change from clint's old pr * Add .gitattributes file to exclude the testing folder from releases. (cisagov#105) * updating sysmon dashboard --------- Co-authored-by: mreeve-snl <[email protected]> Co-authored-by: Alden Hilton <[email protected]> * Healthcheckoverview dashboard update (cisagov#120) * imported new dashboard * updated healthcheck dashboard * Delete Chapter 4 Files/dashboards/alerting_dashboard.ndjson (cisagov#121) removed alerting dashboard from this PR healthcheck PR --------- Co-authored-by: ddiabe <[email protected]> Co-authored-by: ddiabe <[email protected]> * adding push so that I can track this branch * pushing all changes as documented in the PR: 112 * Updated Healthcheck Overview Dashboard panels --------- Co-authored-by: Linda Waterhouse <[email protected]> Co-authored-by: Linda Lovero-Waterhouse <[email protected]> Co-authored-by: mreeve-snl <[email protected]> Co-authored-by: Alden Hilton <[email protected]> Co-authored-by: Rishi Aggarwal <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: Clint Baxley <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: rishagg01 <[email protected]> Co-authored-by: Michael Reeves <[email protected]> Co-authored-by: Andrew Arz <[email protected]> Co-authored-by: ddiabe <[email protected]> Co-authored-by: Grant (SNL) <[email protected]> Co-authored-by: Connor <[email protected]> Co-authored-by: ddiabe <[email protected]>
We have decided to remove the 'old password' logic from the install script as elastic already provides the ability to change the password to whatever you want using the API.
This update to the toubleshooting.md provides guidance on changing the password to the username 'elastic'
I tested this on ls1 in our test environment. Please feel free to test. You dont need to un-install or anything like that. Just run the command. You may need to run it with administrative priv's if your regular account doesn't have access to /opt/lme. the command needs to be able to utilize the certs.