HI,
Im unable to load the auditbeat 7.2.0 dashboard from the server.Please find the error below
# auditbeat setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: Failed to import dashboard: Failed to load directory /usr/share/auditbeat/kibana/7/dashboard:
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-file-integrity.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-kernel-executions.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-kernel-overview.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-kernel-sockets.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-host-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-login-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-overview-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-package-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-process-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-socket-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
error loading /usr/share/auditbeat/kibana/7/dashboard/auditbeat-system-user-dashboard.json: parsing kibana response: invalid character '<' looking for beginning of value. Response: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width"><title>Kibana</title><style>@font-face { font-family: 'Open Sans'; font-st... (truncated)
Below is my auditbeat conf file
#cat /etc/auditbeat/auditbeat.yml
#======================================= General ========================================
tags: auditlog
queue:
mem:
events: 4096
flush:
min_events: 2048
timeout: 1s
logging.level: info
logging.to_files: true
logging.files:
path: /var/log/auditbeat
name: auditbeat
keepfiles: 7
permissions: 0644
#========================================= modules ======================================
auditbeat.modules:
- module: system
datasets:
- host
- login
period: 10m
state.period: 2h
user.detect_password_changes: True
login.wtmp_file_pattern: /var/log/wtmp*
login.btmp_file_pattern: /var/log/btmp*
#======================================== outputs =======================================
output.kafka:
enabled: True
hosts: ["auditlog-kafka-1.xxx.in:9092", "auditlog-kafka-2.xxx.in:9092"]
topic: 'auditbeat'
partition:
hash:
reachable_only: False
hash: []
username:
password:
version: 0.10.0
metadata:
retry:
max: 3
backoff: 250ms
worker: 1
max_retires: 3
bulk_max_size: 2048
timeout: 30s
broker_timeout: 10s
channel_buffer_size: 256
compression: gzip
max_message_bytes: 1000000
required_acks: 1
client_id: beats
#======================================== configure kibana viz =======================================
setup.kibana:
host: "IP:5601"
setup.dashboards.enabled: true
Please help me to create a dashboard