Search for a command to run...
As a passionate DevOps Engineer with 3+ years of experience, I specialize in building robust, scalable, and secure infrastructures. My expertise spans Kubernetes, Jenkins, Docker, AWS, Ansible, Flask, Apache, Nginx, Kibana, Uyuni, Percona PMM, MySQL, and more.
No comments yet. Be the first to comment.
📋 Prerequisites Install base tools and keys: sudo apt update && sudo apt install -y \ curl gnupg2 ca-certificates lsb-release debian-archive-keyring Add NGINX.org signing key: curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor | sudo t...
I know we have been in a situation where the PHP application goes down even if there is no CPU and memory usage on both the application and database on the server. This document explains the common bottleneck and blockage issues that occur when using...
This article explains how to install and manage Uyuni on openSUSE Leap Micro 5.5 and above. The purpose of setting up Uyuni is primarily for patch management, configuration management, and integrating Ansible control. Uyuni serves as a centralized ma...
In today's world, it's crucial to monitor your application logs and get alerted about suspicious or critical activities. If you are using Kibana for log monitoring and want to get real-time alerts on Microsoft Teams or Slack, this guide is for you. T...
In this guide, we'll learn how to export Kibana detection rules using the Kibana Saved Objects API and store them in an S3 bucket. This approach ensures you have backups of your Kibana rules and can restore them whenever needed.
Disaster Recovery: Easily restore your detection rules in case of data loss or corruption.
Migration: Move rules between different Kibana instances seamlessly.
Version Control: Track changes in your rules over time.
AWS CLI configured with the required access to the S3 bucket.
Kibana API Authentication: Make sure you have the API key or basic authentication details for accessing Kibana.
Permissions: Ensure your Kibana user has the required permissions to export rules.
Kibana allows exporting saved objects via its API. Here's how to export your detection rules:
curl -X POST "http://localhost:5601/api/saved_objects/_export" \
-H "kbn-xsrf: true" \
-H "Content-Type: application/json" \
-u "username:password" \
-d '{
"type": ["alert"],
"excludeExportDetails": true
}' -o exported_rules.ndjson
localhost:5601 - Your Kibana URL.
api/saved_objects/_export - Endpoint for exporting saved objects.
type: ['alert'] - Filters to export only detection rules.
-o exported_rules.ndjson - Saves the exported rules to a file.
Once you have your exported file, you can upload it to an S3 bucket with the following command:
aws s3 cp exported_rules.ndjson s3://your-bucket-name/elasticsearch/stackrules/prod/
your-bucket-name - The name of your S3 bucket.To restore the exported rules to Kibana, download the file from S3 and use the following command:
curl -X POST "http://localhost:5601/api/saved_objects/_import" \
-H "kbn-xsrf: true" \
-H "Content-Type: multipart/form-data" \
-F "file=@exported_rules.ndjson" \
-u "username:password"
To automate this process, you can create a cron job:
0 2 * * * /path/to/export_script.sh
This will run the export process daily at 2 AM and upload the file to your S3 bucket.
If you need any help or have questions, feel free to ask! 😊