Skip to content

Update curl command examples for security best practices #8918

@iasdeoupxe

Description

@iasdeoupxe

📌 Request Details

Required Information

Description

In most parts of the documentation curl commands like this are suggested:

curl -X POST "https://<WAZUH_INDEXER_IP_ADDRESS>:9200/_flush" -u <USERNAME>:<PASSWORD> -k

Passing a password on command line is usually a very bad idea for security reasons as the password will e.g. end up the bash history (.bash_history) or similar.

For this reason i would suggest to update all curl commands throughout the documentation to just use -u <USERNAME> (without the :<PASSWORD>) and curl will then provide a prompt in the shell to insert the password afterwards like e.g.:

Enter host password for user 'admin':

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions