Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Guide to Installing and Configuring Grafana on AWS EC2 with MySQL Database Integration

Section 01: Setting Ip AWS EC2 Instances Login to AWS Management Console: Navigate to the EC2 dashboard. Launch Instance: Click on "Launch Instance" and choose an AMI (Amazon Machine Image) based on your preferred OS. Instance Type:…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Section 01: Setting Ip AWS EC2 Instances




  1. Login to AWS Management Console: Navigate to the EC2 dashboard.

  2. Launch Instance: Click on "Launch Instance" and choose an AMI (Amazon Machine Image) based on your preferred OS.

  3. Instance Type: Select an appropriate instance type (e.g., t2.micro for testing).

  4. Configure Instance Details: Set network and subnet. Ensure Auto-assign Public IP is enabled.

  5. Add Storage: Default settings are usually sufficient for Grafana.

  6. Add Tags: Optional, for resource identification.

  7. Configure Security Group: Open ports for HTTP (80) and SSH (22) from your IP address.

  8. Review and Launch: Review settings and launch the instance.

  9. Key Pair: Create a new key pair, download it, and keep it secure.



Section 02: Configuring Security Groups in AWS




  1. Edit Inbound Rules: You will need to set inbound rules when creating a connection between the Grafana server and the MySQL server.



Grafana Server Details:

Public IP: 54.67.123.98

Private IP: 172.10.8.1



MySQL Server Details:

Public IP: 54.128.34.56

Private IP: 172.10.8.2




  1. Add below rules:



HTTP 80 172.0.0.0/8

HTTPS 443 172.0.0.0/8

Custom TCP 3000 172.0.0.0/8

MySQL 3306 172.0.0.0/8



Section 03: Installing Grafana Cloud on the EC2 Server



Here I’m using the Amazon Linux 2023 server and I’m going to install Grafana OSS.




  1. Install Grafana from the RPM repository.



To install Grafana from the RPM repository, complete the following steps



1.1 Import the GPD key:




# wget -q -O gpg.key https://rpm.grafana.com/gpg.key
# sudo rpm --import gpg.key






1.2 Create /etc/yum.repos.d/grafana.repo with the following content




[grafana]
name=grafana
baseurl=https://rpm.grafana.com
repo_gpgcheck=1
enabled=1
gpgcheck=1
gpgkey=https://rpm.grafana.com/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt






1.3 To prevent beta versions from being installed, add the following exclude line to your .repo file




exclude=*beta*






1.4 To install Grafana OSS, run the following command




# sudo dnf install Grafana







  1. Start the Grafana Server



2.1 Start the Grafana server with systemd




# sudo systemctl daemon-reload
# sudo systemctl start grafana-server
# sudo systemctl status grafana-server






2.2 To verify the service is running, run the following command




# sudo systemctl status grafana-server







  1. Sign in to Grafana



To sign in to Grafana for the first time, follow the steps:



3.1 Open your web browser and go to http://your_public_ip:3000

3.2 On the sign-in page use ‘admin’ for the username and password

3.3 Click sign in and change the password.



Section 04: Create a Connection Between Grafana Server and MySQL Server



Here I have an AWS EC2 RedHat server that installed MySQL.




  1. Create a user called “grafana”




mysql> create user ‘grafana’@Grafana_server_private_IP’ identified by 'password';







  1. Grant privileges




mysql> grant all privileges on database_name.* to ‘grafana’@Grafana_server_private_IP’;









mysql> flush privileges;






Section 05: Create a Data source in Grafana

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Guide to Installing and Configuring Grafana on AWS EC2 with MySQL Database Integration
id: 3d9f8d19-b26d-4189-bc11-58f906234b0d
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      DestinationIp:
        - '54.67.123.98'
        - '172.10.8.1'
        - '54.128.34.56'
        - '172.10.8.2'
        - '172.0.0.0'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "Guide to Installing and Config" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
(dest_ip="54.67.123.98" OR dest_ip="172.10.8.1" OR dest_ip="54.128.34.56" OR dest_ip="172.10.8.2" OR dest_ip="172.0.0.0")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
destination.ip: ("54.67.123.98" OR "172.10.8.1" OR "54.128.34.56" OR "172.10.8.2" OR "172.0.0.0") and event.category: "network"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where DestinationIP in ("54.67.123.98", "172.10.8.1", "54.128.34.56", "172.10.8.2", "172.0.0.0")
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

IoC Intelligence (5 Indikatoren)
54[.]67[.]123[.]98172[.]10[.]8[.]154[.]128[.]34[.]56172[.]10[.]8[.]2172[.]0[.]0[.]0
CTI Threat Relationship Graph6 Knoten / 5 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Guide to Installing and Configuring Graf.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Guide to Installing and Configuring Grafana on AWS EC2 with MySQL Database Integration

Thematisch verwandte Begriffe: Guide, Installing, Configuring, Grafana · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100620 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an ove…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag