...
The export procedure is completed.
...
d) In Elasticsearch passphrase field (for HTTPS connection) enter the passphrase, which you use for your keystore.
3. Save the setting changes and restart AuditDriver.
...
a) Click on the checkbox next to Enable/Disable HTTPS field.
b) Enter your keystore type, PKCS12 or JKS, in Server KeyStore Type field.
c) Enter your keystore file name in Server KeyStore file field.
d) Enter passphrase for your kesytore in Server KeyStore password field.
e) Enter passphrase for your private keys in Server PrivateKey password field.
f) Go to the tab Elasticsearch & Kibana.
g) Make sure that Enable/Disable HTTPS checkbox is active.
h) Since all the services are installed on the same server, enter the same values for Keystore type, Keystore file, Keystore password as for the GLOBAL tab.
5. Click Save button.
6. Restart AuditServer.
7. Change the protocol from http to https in the address bar of your browser in order to open AuditServer page through https protocol.
...
**** Also, to solve problems with self-signed certificates you may need to add your self-signed certificate to cacert truststore of your Java.
Please follow the steps as described below:
...
e) Restart ACD modules.
Possible problems and ways to find and solve them
...
...
Dashboards are not shown in AuditServer
...
- check if kibana proxy is active in your web-browser (see above)
- check if AuditServer and AuditPoxy are using the same protocol – https
- check if there is https defined in AuditProxy config.json file, kibana section, auditUrl attribute
- check log files in AuditServer and AuditProxy for mistakes
- if you use self-signed certificates, make sure that exceptions for the certificates used for AuditProxy were added to your web-browser (see above)
...
Reports and indexes Elasticsearch are not shown in AuditServer
...
- check if elasticsearch proxy is active in your web-browser (see above)
- check if AuditServer and AuditPoxy are using the same protocol – https
- check log files in AuditServer and AuditProxy for mistakes
- if you use self-signed certificates, make sure that exceptions for the certificates used for AuditProxy were added to your web-browser (see above)
...
AuditDriver cannot sent data to elasticsearch (via AuditProxy)
...
- turn on logging for the driver and analyze log files
- check that keystore used for AuditDriver works properly and contains the required certificate to access AuditProxy
...