Does this version of sigma rule run on kibana version 8
I am trying to install sigma rule on kibana I followed the instructions but it failed The document of sigma rule has instructions for me to execute the command: /usr/share/kibana/bin/./kibana-plugin install file:///PATH_TO_FILE/sigma-ui-xxxxx.zip The command i run: /usr/share/kibana/bin/kibana-plugin install file:///usr/share/kibana/bin/sigma_ui_1.2.5.zip and this is what i'm having Found previous install attempt. Deleting... Attempting to transfer from file:///usr/share/kibana/bin/sigma_ui_1.2.5.zip Transferring 13993246 bytes.................... Transfer complete Retrieving metadata from plugin archive Plugin installation was unsuccessful due to error "No kibana plugins found in archive"
I have the exact same issue
asad@elk:~$ sudo /usr/share/kibana/bin/./kibana-plugin install file:///home/asad/sigma_ui_1.2.5.zip
Found previous install attempt. Deleting...
Attempting to transfer from file:///home/asad/sigma_ui_1.2.5.zip
Transferring 13993249 bytes....................
Transfer complete
Retrieving metadata from plugin archive
Plugin installation was unsuccessful due to error "No kibana plugins found in archive"
asad@elk:~$
I also made change to package.json
"url": "http://socprime.com"
},
"main": "index.js",
"kibana": {
"version": "8.9.1",
"templateVersion": "8.0.0"
},
but I get same error, please help.
I am also facing the same issue:
sudo /usr/share/kibana/bin/./kibana-plugin install file:/home/xd/Downloads/SigmaUI-master/sigma_ui_1.2.5.zip [sudo] password for xd: Attempting to transfer from file:/home/xd/Downloads/SigmaUI-master/sigma_ui_1.2.5.zip Transferring 13993246 bytes.................... Transfer complete Retrieving metadata from plugin archive Plugin installation was unsuccessful due to error "No kibana plugins found in archive"
@Axceler The last commit to the repo was back when Kibana was on 7.6.0 it's on 8.13.2 or 7.17.20 now. No idea how to fix it any possible breaking changes and dependencies that Kibana may just rejecting over the last 4 years but have you tried using 7.x, if you're using 8.x now?