search

Cyb3rWard0g / HELK

The Hunting ELK
GNU General Public License v3.0
3.73k stars 675 forks source link

no web ui / nginx? #547

Closed CheeseC4k3 closed 3 years ago

CheeseC4k3 commented 3 years ago

Describe the problem

after a fresh install on Ubuntu, firefox is unable to connect.

Provide the output of the following commands

Ubuntu 18.04.5 LTS
Docker Space 127 GB

Processes:
CONTAINER ID   IMAGE                                                 COMMAND                  CREATED          STATUS          PORTS                                                                                                                                                                                                  NAMES
5c25ede15119   otrf/helk-spark-worker:2.4.5                          "./spark-worker-entr…"   43 minutes ago   Up 43 minutes                                                                                                                                                                                                          helk-spark-worker
88183d0182fb   confluentinc/cp-ksql-cli:5.1.3                        "/bin/sh"                43 minutes ago   Up 43 minutes                                                                                                                                                                                                          helk-ksql-cli
d82d9a25711f   confluentinc/cp-ksql-server:5.1.3                     "/etc/confluent/dock…"   44 minutes ago   Up 3 minutes    0.0.0.0:8088->8088/tcp                                                                                                                                                                                 helk-ksql-server
e02c4fe62d76   otrf/helk-kafka-broker:2.4.0                          "./kafka-entrypoint.…"   44 minutes ago   Up 44 minutes   0.0.0.0:9092->9092/tcp                                                                                                                                                                                 helk-kafka-broker
a528094ae27f   otrf/helk-spark-master:2.4.5                          "./spark-master-entr…"   44 minutes ago   Up 43 minutes   7077/tcp, 0.0.0.0:8080->8080/tcp                                                                                                                                                                       helk-spark-master
24dab2c308f4   docker_helk-jupyter                                   "/opt/jupyter/script…"   44 minutes ago   Up 43 minutes   8000/tcp, 8888/tcp                                                                                                                                                                                     helk-jupyter
a385c7b023d6   otrf/helk-zookeeper:2.4.0                             "./zookeeper-entrypo…"   44 minutes ago   Up 44 minutes   2181/tcp, 2888/tcp, 3888/tcp                                                                                                                                                                           helk-zookeeper
cbe9bc7f0ae5   otrf/helk-elastalert:latest                           "./elastalert-entryp…"   44 minutes ago   Up 44 minutes                                                                                                                                                                                                          helk-elastalert
34c657ddf313   otrf/helk-logstash:7.6.2.1                            "/usr/share/logstash…"   44 minutes ago   Up 44 minutes   0.0.0.0:3515->3515/tcp, 0.0.0.0:5044->5044/tcp, 0.0.0.0:5514->5514/tcp, 0.0.0.0:5514->5514/udp, 0.0.0.0:8515-8516->8515-8516/tcp, 0.0.0.0:8531->8531/tcp, 0.0.0.0:8515-8516->8515-8516/udp, 9600/tcp   helk-logstash
e2019708cbb0   otrf/helk-nginx:0.3.0                                 "/opt/helk/scripts/n…"   44 minutes ago   Up 10 minutes   0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp                                                                                                                                                               helk-nginx
4474f630eb72   docker.elastic.co/kibana/kibana:7.6.2                 "/usr/share/kibana/s…"   44 minutes ago   Up 10 minutes   5601/tcp                                                                                                                                                                                               helk-kibana
9d6494a9248b   docker.elastic.co/elasticsearch/elasticsearch:7.6.2   "/usr/share/elastics…"   44 minutes ago   Up 44 minutes   9200/tcp, 9300/tcp

Provide the HELK installation logs located at /var/log/helk-install.log if you are having install errors

no problems here

What version of HELK are you using

b40f92f
What steps did you take trying to fix the issue

restarting kibana and nginx

How could we replicate the issue

run the install script, option 4, IP address that is not the host's

Any additional context or input you have

The nginx logs:

$ sudo docker logs --follow --tail 60 helk-nginx
trap: SIGTERM: bad trap
Generating a RSA private key
..........+++++
.......................................................+++++
writing new private key to '/etc/ssl/private/HELK_Nginx.key'
-----
[HELK-DOCKER-INSTALLATION-INFO] Starting remaining services..
Restarting nginx: nginx.
[HELK-DOCKER-INSTALLATION-INFO] Pushing Nginx Logs to console..
trap: SIGTERM: bad trap
Generating a RSA private key
.....+++++
........................+++++
writing new private key to '/etc/ssl/private/HELK_Nginx.key'
-----
[HELK-DOCKER-INSTALLATION-INFO] Starting remaining services..
start-stop-daemon: warning: failed to kill 62: No such process
Restarting nginx: nginx.
[HELK-DOCKER-INSTALLATION-INFO] Pushing Nginx Logs to console..

complete n00b here

CheeseC4k3 commented 3 years ago

how can I change the IP again? Maybe it works if I use the host's IP

CheeseC4k3 commented 3 years ago

ahh I got closer to the solution. I logged into the nginx docker and found out it is set up on a completely different IP address. 172.xxx instead of 192.xxx... which is what I specified on the install.

CheeseC4k3 commented 3 years ago

will try to change that.