wazuh / wazuh-dashboard-plugins

Plugins for Wazuh Dashboard
https://wazuh.com/
GNU General Public License v2.0
432 stars 180 forks source link

Testing 4.0.4-7.10.0 #2801

Closed Desvelao closed 3 years ago

Desvelao commented 3 years ago
Wazuh Elastic Rev
4.0.4 7.10.0 4016

Description Testing.

Test with browsers:

Test with the theme:

Checks:

Desvelao commented 3 years ago

General checks

Chrome

Filter checks (Modules)

Modules views

Query bar

Visualizations

Events related checks

Overview UI

Reporting

Management - Status

Management home UI

Management - Cluster

Management - Logs

Management - Reporting

Management - Ruleset

Management - Groups

Management - Configuration

DevTools

If admin mode is enabled:

Agents preview

Agent specific view UI

App menu

Settings

Firefox

Filter checks (Modules)

Modules views

Query bar

Visualizations

Events related checks

Overview UI

Reporting

Management - Status

Management home UI

Management - Cluster

Management - Logs

Management - Reporting

Management - Ruleset

Management - Groups

Management - Configuration

DevTools

If admin mode is enabled:

Agents preview

Agent specific view UI

App menu

Settings

Misc

Backend Jobs

Desvelao commented 3 years ago

ODFE 1.12.0 checks

Index patterns creations

RBAC

Desvelao commented 3 years ago

X-Pack checks

Index patterns creations

RBAC

frankeros commented 3 years ago

The table pagination doesn't work in SCA check list When a page number is clicked. image

Update: PR to resolve: https://github.com/wazuh/wazuh-kibana-app/pull/2815

frankeros commented 3 years ago

The Kibana pop up should not be displayed image

Update: PR to resolve https://github.com/wazuh/wazuh-kibana-app/pull/2806

frankeros commented 3 years ago

When you try to change a rule or decoder and restart the cluster this happens image

Update: PR to resolve #2820

s-ocando commented 3 years ago

RBAC fails to provide access to specific agents

A user with access to a limited number of agents (2 out of 4) gets a correct agent count in the "Modules overview" page but can't access the Agents section (and in consequence can't see the agents summary or SCA information).

A very common use-case is to provide access to a group of agents to specific users associated with those endpoints (departments, MSSP customers, etc)

image

image


PR #2838

jctello commented 3 years ago

Related to what is mentioned here the Rows per page selector doesn't work (it's always stuck at 10 rows): image

Update: PR to resolve: https://github.com/wazuh/wazuh-kibana-app/pull/2815

jctello commented 3 years ago

Selecting Security configuration assessment breaks the formatting of the Modules directory in the drop-down menu. image I mean that the Auditing and Policy Monitoring section of modules gets moved to a second row below the Security information management section.

frankeros commented 3 years ago

RBAC fails to provide access to specific agents

@ s-ocando This is the current behavior for this section, we agree that an enhancement is needed, but we will work out of this issue in a future sprint. Please feel free to open an enhancement issue with this approach.

Thanks for reporting!

Update: It was tested in 4.0.3 4014, but it works on 4.0.4 4015

s-ocando commented 3 years ago

I'm attaching a gif to show the current RBAC behaviour (app version 4.0.4-7.9.1 revision 4015). A user is able to see the list of its allowed agents, at first is only able to see agent 001 and by adding permissions to read agent 002 it appears in its list after refreshing. This feature is currently malfunctioning in app 4.0.4-7.10.0 revision 4016.

RBAC

frankeros commented 3 years ago

I'm attaching a gif to show the current RBAC behaviour (app version 4.0.4-7.9.1 revision 4015). A user is able to see the list of its allowed agents, at first is only able to see agent 001 and by adding permissions to read agent 002 it appears in its list after refreshing. This feature is currently malfunctioning in app 4.0.4-7.10.0 revision 4016.

You're right, we are working on this issue right now. Thank you very much.

frankeros commented 3 years ago

Selecting Security configuration assessment breaks the formatting of the Modules directory in the drop-down menu.

@jctello I can't reproduce it in Chrome in any reasonable resolution image

can you share what browser and resolution are you using to check it, please?

PR #2861

jctello commented 3 years ago

Selecting Security configuration assessment breaks the formatting of the Modules directory in the drop-down menu.

@jctello I can't reproduce it in Chrome in any reasonable resolution

can you share what browser and resolution are you using to check it, please?

Yes, this observed only on Firefox (I'm using 84.0.2) on Linux. It is not observed on Chromium (on Linux) or Firefox 83 on Windows.

jctello commented 3 years ago

The search functionality in file editor is gone. To reproduce go to Management > Configuration > Edit configuration, click on the text box and press Ctrl+F. On the previous version this would give a handy search box within the file. Console output is:


GEThttps://192.168.40.4/app/ext-searchbox.js
[HTTP/1.1 200 OK 22ms]

The script from “https://192.168.40.4/app/ext-searchbox.js” was loaded even though its MIME type (“text/html”) is not a valid JavaScript MIME type. wazuh
Some cookies are misusing the recommended “SameSite“ attribute 2
Uncaught SyntaxError: expected expression, got '<' ext-searchbox.js:1
Uncaught TypeError: t is undefined
    exec https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    s https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    s https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    i https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    o https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    s https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    onreadystatechange https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    loadScript https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    loadModule https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    exec https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    a https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    _dispatchEvent https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    exec https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    $callKeyboardHandlers https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    onCommandKey https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    onCommandKey https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    l https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
    addCommandKeyListener https://192.168.40.4/35949/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.js:380
kbn-ui-shared-deps.js:380:1175239

PR #2843

Desvelao commented 3 years ago

The Techniques container for the MITRE's Framework tab goes out of the window size. This could be happening in the Modules > PCI DSS GDPR HIPAA NIST 800-53 and TSC Controls' tabs too.

image

PR #2861

Desvelao commented 3 years ago

The statistics indices are being wrongly created with:

This should be fixed here https://github.com/wazuh/wazuh-kibana-app/pull/2779, but it not working in my environment.

Fixed: https://github.com/wazuh/wazuh-kibana-app/pull/2858

CPAlejandro commented 3 years ago

image I have found an error with styles using Open Distro.

PR #2865

pablomarga commented 3 years ago

Hi team! Testing the app I have found an error when you pinned a filter and then going to Agents section. When you return to any "Module" the dashboard is not displayed.

https://user-images.githubusercontent.com/46006326/106161530-66e9a700-6187-11eb-9424-9ad4fe467ac1.mov

Captura de pantalla 2021-01-28 a las 16 30 51

PR #2864

Desvelao commented 3 years ago

Click in the rule details links don't add a filter in the Management > Rules search bar when access from Modules/any/Events

How to reproduce: bug-rule-filter-search-bar-not-added

frankeros commented 3 years ago

We need to move the Wazuh menu upper in the Kibana menu image

And set the wazuh-alerts-* as the default index pattern when it's created. image

PR #2867

jctello commented 3 years ago

PDF reporting can reflect wrong filters as reported here: https://github.com/wazuh/wazuh-kibana-app/issues/2874