Access Evebox not from localhost

Hi all,
I installed Evebox “vanilla” (I mean using the embedded sqlite db not ELK stack or Elastic-Search), on a server but I’m not able to review the events from another machine (the server actually is only shell based).
Locally it works (I test it running “curl”) and there are not firewall rules in place to block any ip.

Do you know if it is possible to access to the Evebox GUI remotely?
I tried to check the evebox.yaml config file but there isn’t rules for allow/disallow ip.


By defualt EveBox binds to localhost. You can change this on the command line, something like

evebox server --host

take a note that there is no authentication enabled by default. See for adding authentication, or run it behind a reverse proxy that already has authentication enabled.