framapiaf.org est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Un service Mastodon fourni par l'association d’éducation populaire Framasoft.

Administré par :

Statistiques du serveur :

1,4K
comptes actifs

#kibana

0 message0 participant0 message aujourd’hui
Eric Horwath<p>Which <a href="https://hachyderm.io/tags/logging" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>logging</span></a> system do you prefer for managing logs in <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a>?</p><p><a href="https://hachyderm.io/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://hachyderm.io/tags/log" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>log</span></a> <a href="https://hachyderm.io/tags/LogManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>LogManagement</span></a> <a href="https://hachyderm.io/tags/logs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>logs</span></a> <a href="https://hachyderm.io/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a> <a href="https://hachyderm.io/tags/elastic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elastic</span></a> <a href="https://hachyderm.io/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a> <a href="https://hachyderm.io/tags/opensearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>opensearch</span></a> <a href="https://hachyderm.io/tags/fluent" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fluent</span></a> <a href="https://hachyderm.io/tags/fluent2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fluent2</span></a> <a href="https://hachyderm.io/tags/fluentbit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fluentbit</span></a> <a href="https://hachyderm.io/tags/fluentd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fluentd</span></a> <a href="https://hachyderm.io/tags/logstash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>logstash</span></a> <a href="https://hachyderm.io/tags/kafka" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kafka</span></a> <a href="https://hachyderm.io/tags/grafana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>grafana</span></a> <a href="https://hachyderm.io/tags/loki" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>loki</span></a> <a href="https://hachyderm.io/tags/promtail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>promtail</span></a> <a href="https://hachyderm.io/tags/cncf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cncf</span></a></p>
anil visualpath<p>🔗 Join Now: <a href="https://meet.goto.com/162495453" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">meet.goto.com/162495453</span><span class="invisible"></span></a><br>👉 Attend Online <a href="https://mastodon.social/tags/NewBatch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>NewBatch</span></a> from Visualpath on <a href="https://mastodon.social/tags/SiteReliabilityEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SiteReliabilityEngineering</span></a> (SRE)👨‍🏫 by Mr. karn (Best Industry Expert).<br>📅 Batch ON: 11/03/2025 <span class="h-card" translate="no"><a href="https://mastodon.social/@8am" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>8am</span></a></span> IST<br>📲 Contact us: +91 7032290546<br>🌐 Visit: <a href="https://www.visualpath.in/online-site-reliability-engineering-training.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">visualpath.in/online-site-reli</span><span class="invisible">ability-engineering-training.html</span></a><br>👉 WhatsApp: <a href="https://wa.me/c/917032290546" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">wa.me/c/917032290546</span><span class="invisible"></span></a><br>🌐 Visit Blog: <a href="https://visualpathblogs.com/category/site-reliability-engineering/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">visualpathblogs.com/category/s</span><span class="invisible">ite-reliability-engineering/</span></a></p><p>📢 <a href="https://mastodon.social/tags/Terraform" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Terraform</span></a> <a href="https://mastodon.social/tags/ansible" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ansible</span></a> <a href="https://mastodon.social/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://mastodon.social/tags/newrelic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newrelic</span></a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>linux</span></a> <a href="https://mastodon.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a> <a href="https://mastodon.social/tags/slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>slack</span></a> <a href="https://mastodon.social/tags/onlinetraining" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>onlinetraining</span></a> <a href="https://mastodon.social/tags/education" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>education</span></a> <a href="https://mastodon.social/tags/newtechnology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newtechnology</span></a> <a href="https://mastodon.social/tags/traininginstitute" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>traininginstitute</span></a> <a href="https://mastodon.social/tags/learning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>learning</span></a></p>
Cybernews<p>Software giant Elastic rolled out security updates, warning users of a critical vulnerability in Kibana's data visualization dashboard.</p><p><a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>malware</span></a> <a href="https://infosec.exchange/tags/bug" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bug</span></a> <a href="https://infosec.exchange/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerability</span></a> </p><p><a href="https://cnews.link/critical-kibana-vulnerability-remote-code-execution-1/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">cnews.link/critical-kibana-vul</span><span class="invisible">nerability-remote-code-execution-1/</span></a></p>
securityaffairs<p><a href="https://infosec.exchange/tags/Elastic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Elastic</span></a> patches critical <a href="https://infosec.exchange/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> flaw allowing code execution<br><a href="https://securityaffairs.com/174999/security/elastic-kibana-critical-flaw.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">securityaffairs.com/174999/sec</span><span class="invisible">urity/elastic-kibana-critical-flaw.html</span></a><br><a href="https://infosec.exchange/tags/securityaffairs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>securityaffairs</span></a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hacking</span></a></p>
anil visualpath<p>🔗 Join now: <a href="https://bit.ly/4igasPB" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">bit.ly/4igasPB</span><span class="invisible"></span></a><br>👉 Meeting ID: 463 001 180553<br>👉 Passcode: xV2xf9vM<br>👉 Attend Online <a href="https://mastodon.social/tags/FreeDemo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FreeDemo</span></a> from Visualpath on <a href="https://mastodon.social/tags/SiteReliabilityEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SiteReliabilityEngineering</span></a> (SRE) by 👨‍🏫 Mr. Karn (Best Industry Expert).<br>📅 Demo on: 08/03/2025 <span class="h-card" translate="no"><a href="https://mastodon.social/@9am" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>9am</span></a></span> IST<br>📲 Contact us: +91 7032290546<br>🌐 Visit: <a href="https://www.visualpath.in/online-site-reliability-engineering-training.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">visualpath.in/online-site-reli</span><span class="invisible">ability-engineering-training.html</span></a></p><p>📢 <a href="https://mastodon.social/tags/Terraform" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Terraform</span></a> <a href="https://mastodon.social/tags/ansible" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ansible</span></a> <a href="https://mastodon.social/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://mastodon.social/tags/newrelic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newrelic</span></a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>linux</span></a> <a href="https://mastodon.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a> <a href="https://mastodon.social/tags/slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>slack</span></a> <a href="https://mastodon.social/tags/onlinetraining" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>onlinetraining</span></a> <a href="https://mastodon.social/tags/education" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>education</span></a> <a href="https://mastodon.social/tags/newtechnology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newtechnology</span></a></p>
anil visualpath<p>🔗 Join now: <a href="https://bit.ly/4igasPB" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">bit.ly/4igasPB</span><span class="invisible"></span></a><br>👉 Meeting ID: 463 001 180553<br>👉 Passcode: xV2xf9vM<br>👉 Attend Online <a href="https://mastodon.social/tags/FreeDemo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FreeDemo</span></a> from Visualpath on <a href="https://mastodon.social/tags/SiteReliabilityEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SiteReliabilityEngineering</span></a> (SRE) by 👨‍🏫 Mr. Preet (Best Industry Expert).<br>📅 Demo on: 08/03/2025 <span class="h-card" translate="no"><a href="https://mastodon.social/@9am" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>9am</span></a></span> IST<br>📲 Contact us: +91 7032290546<br>🌐 Visit: <a href="https://www.visualpath.in/online-site-reliability-engineering-training.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">visualpath.in/online-site-reli</span><span class="invisible">ability-engineering-training.html</span></a><br>👉 WhatsApp: <a href="https://wa.me/c/917032290546" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">wa.me/c/917032290546</span><span class="invisible"></span></a><br>🌐 Visit Blog: <a href="https://visualpathblogs.com/category/site-reliability-engineering/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">visualpathblogs.com/category/s</span><span class="invisible">ite-reliability-engineering/</span></a></p><p>📢 <a href="https://mastodon.social/tags/Terraform" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Terraform</span></a> <a href="https://mastodon.social/tags/ansible" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ansible</span></a> <a href="https://mastodon.social/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://mastodon.social/tags/newrelic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newrelic</span></a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>linux</span></a> <a href="https://mastodon.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a> <a href="https://mastodon.social/tags/slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>slack</span></a> <a href="https://mastodon.social/tags/onlinetraining" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>onlinetraining</span></a> <a href="https://mastodon.social/tags/education" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>education</span></a> <a href="https://mastodon.social/tags/newtechnology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newtechnology</span></a> <a href="https://mastodon.social/tags/traininginstitute" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>traininginstitute</span></a></p>
anil visualpath<p><a href="https://mastodon.social/tags/Visualpath" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Visualpath</span></a> offers <a href="https://mastodon.social/tags/sitereliabilityengineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sitereliabilityengineering</span></a> Online Training in Bangalore with expert-led, job-oriented training and real-time projects.Our SRE Certification Course includes daily recorded sessions, 24/7 access, and resume preparation support. Enroll now or call +91-7032290546 for a free demo!<br>🌐 Visit: <a href="https://www.visualpath.in/online-site-reliability-engineering-training.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">visualpath.in/online-site-reli</span><span class="invisible">ability-engineering-training.html</span></a><br>👉 WhatsApp: <a href="https://wa.me/c/917032290546" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">wa.me/c/917032290546</span><span class="invisible"></span></a><br>🌐 Visit Blog: <a href="https://visualpathblogs.com/category/site-reliability-engineering/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">visualpathblogs.com/category/s</span><span class="invisible">ite-reliability-engineering/</span></a></p><p><a href="https://mastodon.social/tags/Terraform" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Terraform</span></a> <a href="https://mastodon.social/tags/ansible" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ansible</span></a> <a href="https://mastodon.social/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://mastodon.social/tags/newrelic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newrelic</span></a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>linux</span></a> <a href="https://mastodon.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a></p>
Philipp Krenn<p>running <a href="https://mastodon.social/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a> + <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a> preview releases just got a lot easier: `curl -fsSL <a href="https://elastic.co/start-local" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">elastic.co/start-local</span><span class="invisible"></span></a> | sh -s -- -v 9.0.0-beta1` 🙌</p><p>or also older versions for testing: `curl -fsSL <a href="https://elastic.co/start-local" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">elastic.co/start-local</span><span class="invisible"></span></a> | sh -s -- -v 7.17.27`</p><p>no need for my hack any more 😅</p>
anil visualpath<p><a href="https://mastodon.social/tags/Visualpath" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Visualpath</span></a>, a leading <a href="https://mastodon.social/tags/sitereliabilityengineerEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sitereliabilityengineerEngineering</span></a> Training Online in Bangalore offers expert-led courses with real-time projects. Get Daily Recorded Sessions for Reference and 24/7 Access to Recorded Sessions for flexible learning. Our SRE online courses are globally accessible in the USA, UK, Canada, Dubai, and Australia. Enroll now or call +91-7032290546 for a free demo!<br>Visit: <a href="https://www.visualpath.in/online-site-reliability-engineering-training.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">visualpath.in/online-site-reli</span><span class="invisible">ability-engineering-training.html</span></a></p><p><a href="https://mastodon.social/tags/Terraform" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Terraform</span></a> <a href="https://mastodon.social/tags/ansible" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ansible</span></a> <a href="https://mastodon.social/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://mastodon.social/tags/newrelic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>newrelic</span></a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>linux</span></a></p>
Philipp Krenn<p>since I keep running into the question: how do I stay up to date with releases?</p><p>for every project that does releases on <a href="https://mastodon.social/tags/GitHub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GitHub</span></a> (like <a href="https://mastodon.social/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a>, <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a>,... but also countless others), you can watch "custom" events and then only select "releases". you'll only get release updates</p>
Andreas Gohr<p>Is there really no simple <a href="https://octodon.social/tags/ElasticSearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ElasticSearch</span></a> client ala <a href="https://octodon.social/tags/adminer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>adminer</span></a> or <a href="https://octodon.social/tags/phpmyadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>phpmyadmin</span></a> that lets me poke at a ElasticSearch index to just verify what's there? I seriously have no idea what 95% of what <a href="https://octodon.social/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> even does. And yes I know I can poke around using curl, but I would really appreciate a very simple web interface.</p>
Philipp Krenn<p>the stars are back for <a href="https://mastodon.social/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a>, <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a>,...⭐️<br>after the accidental change to make things too secure 🫠, the last piece of the github restore of all the public elastic repos is finally done. also big thanks to @github to working this out with us</p>
Philipp Krenn<p>we're deprecating <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a> for macOS x86_64 🪦<br>aarch / ARM64 are of course staying around and docker images will work on both architectures. since apple switched to the M* CPUs a while ago and other projects like pytorch stopped supporting x86_64 earlier, we'll follow. both the hardware and our dependencies (like Node.js) are becoming an issue<br>shout if we're overlooking something here and this is a bigger issue than expected for you for some reason!</p>
Philipp Krenn<p>we wanted to make things better (more secure) but we took some elastic github repos private in error including <a href="https://mastodon.social/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a> and <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a><br>hold tight — we'll get this sorted out with github 🤞</p><p><a href="https://twitter.com/ElasticStatus/status/1851239606492225663" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">twitter.com/ElasticStatus/stat</span><span class="invisible">us/1851239606492225663</span></a></p>
Philipp Krenn<p>what is the easiest way to run <a href="https://mastodon.social/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a> and <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a>?<br>curl -fsSL <a href="https://elastic.co/start-local" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">elastic.co/start-local</span><span class="invisible"></span></a> | sh</p><p>and this is what it looks like:</p>
benzogaga33 :verified:<p>Revue de presse de l’April pour la semaine 36 de l’année 2024 <a href="https://linuxfr.org/news/revue-de-presse-de-l-april-pour-la-semaine-36-de-l-annee-2024" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">linuxfr.org/news/revue-de-pres</span><span class="invisible">se-de-l-april-pour-la-semaine-36-de-l-annee-2024</span></a> <a href="https://mamot.fr/tags/cour_des_comptes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cour_des_comptes</span></a> <a href="https://mamot.fr/tags/revue_de_presse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>revue_de_presse</span></a> <a href="https://mamot.fr/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a> <a href="https://mamot.fr/tags/Internet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Internet</span></a> <a href="https://mamot.fr/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a></p>
Sam Stepanyan :verified: 🐘<p><a href="https://infosec.exchange/tags/Elastic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Elastic</span></a>: Critical <a href="https://infosec.exchange/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> Vulnerabilities (CVE-2024-37288, CVE-2024-37285) Expose Systems to Arbitrary Code Execution potentially leading to complete system compromise. Both CVEs are related to YAML <a href="https://infosec.exchange/tags/Deserialization" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Deserialization</span></a>. Patch now - Upgrade to Kibana v8.15.1:<br>👇<br><a href="https://securityonline.info/critical-kibana-flaws-cve-2024-37288-cve-2024-37285-expose-systems-to-arbitrary-code-execution/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">securityonline.info/critical-k</span><span class="invisible">ibana-flaws-cve-2024-37288-cve-2024-37285-expose-systems-to-arbitrary-code-execution/</span></a></p><p><a href="https://securityonline.info/critical-kibana-flaws-cve-2024-37288-cve-2024-37285-expose-systems-to-arbitrary-code-execution/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">securityonline.info/critical-k</span><span class="invisible">ibana-flaws-cve-2024-37288-cve-2024-37285-expose-systems-to-arbitrary-code-execution/</span></a></p>
Philipp Krenn<p>if you have made it this far and want to see how this all maps to <a href="https://mastodon.social/tags/elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elasticsearch</span></a> + <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a>, the following image from the FAQ (<a href="https://elastic.co/pricing/faq/licensing" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">elastic.co/pricing/faq/licensi</span><span class="invisible">ng</span></a>) is the best description, which should clear up most of the confusion 8/10</p>
Philipp Krenn<p>the <a href="https://mastodon.social/tags/elastic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>elastic</span></a> addition of the <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>opensource</span></a> AGPL is in progress — actually <a href="https://mastodon.social/tags/kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kibana</span></a> is starting: <a href="https://github.com/elastic/kibana/pull/192025" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/elastic/kibana/pull</span><span class="invisible">/192025</span></a><br>this is a friday evening operation since it changes ~20K files and will cause conflicts in many open PRs<br>since it's a confusing and very emotional topic, let's see where things are going 1/10</p>
🛡 H3lium@infosec.exchange/:~# :blinking_cursor:​<p><strong>Critical Kibana Vulnerability - Arbitrary Code Execution via YAML Deserialization</strong></p><p><strong>Date</strong>: September 5, 2024<br><br><strong>CVE</strong>: CVE-2024-37285<br><br><strong>Vulnerability Type</strong>: Deserialization of Untrusted Data<br><br><strong>CWE</strong>: [[CWE-502]]<br><br><strong>Sources</strong>: <a href="https://discuss.elastic.co/t/kibana-8-15-1-security-update-esa-2024-27-esa-2024-28/366119" rel="nofollow noopener noreferrer" target="_blank">Elastic Security Advisory</a></p><p><strong>Synopsis</strong></p><p>CVE-2024-37285 impacts Kibana versions 8.10.0 to 8.15.0, where a deserialization flaw allows remote code execution if an attacker injects malicious YAML payloads. This vulnerability requires that an attacker has elevated Elasticsearch and Kibana privileges.</p><p><strong>Issue Summary</strong></p><p>The vulnerability arises from improper YAML deserialization within Kibana. A malicious actor can craft a YAML payload and execute arbitrary code, provided they have specific Elasticsearch index and Kibana privileges. This issue affects Kibana from versions 8.10.0 through 8.15.0 and is critical due to its ease of exploitation and the potential for widespread impact.</p><p><strong>Technical Key Findings</strong></p><p>Attackers exploit this flaw by submitting a specially crafted YAML document that Kibana deserializes without proper validation. Once the malicious code is parsed, it can run on the server with elevated privileges, enabling arbitrary code execution. </p><p>The attacker must have the following Elasticsearch indices permissions; </p><ul><li><code>write</code> access to system indices&nbsp;<code>.kibana_ingest*</code><br></li><li>The&nbsp;<code>allow_restricted_indices</code>&nbsp;flag needs to be set to&nbsp;<code>true</code></li></ul><p>The attacker must also have ANY of the following Kibana privileges; </p><ul><li>Under&nbsp;<code>Fleet</code>&nbsp;the&nbsp;<code>All</code>&nbsp;privilege is granted</li><li>Under&nbsp;<code>Integration</code>&nbsp;the&nbsp;<code>Read</code>&nbsp;or&nbsp;<code>All</code>&nbsp;privilege is granted</li><li>Access to the&nbsp;<code>fleet-setup</code>&nbsp;privilege is gained through the Fleet Server’s service account token## Vulnerable Products</li><li>Kibana versions 8.10.0 to 8.15.0.</li></ul><p><strong>Impact Assessment</strong></p><p>Successful exploitation could allow an attacker to execute arbitrary commands, leading to a complete system compromise. This could affect confidentiality, integrity, and availability, making it a high-risk issue for organizations relying on Kibana for data visualization and exploration.</p><p><strong>Patches or Workaround</strong></p><p>Upgrading to Kibana version 8.15.1 resolves this vulnerability. Additionally, limiting access to Elasticsearch indices and restricting Kibana privileges reduces exposure.</p><p><strong>Tags</strong></p><p><a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE</span></a>-2024-37285 <a href="https://infosec.exchange/tags/Kibana" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kibana</span></a> <a href="https://infosec.exchange/tags/ArbitraryCodeExecution" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ArbitraryCodeExecution</span></a> <a href="https://infosec.exchange/tags/YAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>YAML</span></a> <a href="https://infosec.exchange/tags/Deserialization" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Deserialization</span></a> <a href="https://infosec.exchange/tags/ElasticStack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ElasticStack</span></a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSecurity</span></a></p>