CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-19 23:43:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

merge with dev, resolve conflict

Browse Source
This commit is contained in:
m0duspwnens
2022-01-11 11:24:10 -05:00
parent 14eed8e5b9 5083be4ce7
commit baf297ab0a
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/common/tools/sbin/soup
View File

@@ -664,7 +664,7 @@ up_to_2.3.90() {
}
up_to_2.3.100() {
echo "Updating to Security Onion to 2.3.100"
echo "Updating to Security Onion 2.3.100"
fix_wazuh
}

6
salt/elasticsearch/files/ingest/ossec
View File

@@ -39,6 +39,12 @@
{ "rename": { "field": "decoder.name", "target_field": "event.dataset", "ignore_missing": true } },
{ "rename": { "field": "rule.description", "target_field": "rule.name", "ignore_missing": true } },
{ "rename": { "field": "rule.id", "target_field": "rule.uuid", "ignore_missing": true } },
{ "script": {
"if": "ctx.winlog?.event_data != null",
"lang": "painless",
"source": "Map eventData = ctx['winlog']['event_data']; Map updatedEventData = new HashMap(); for (String key: eventData.keySet()) { updatedEventData[key.substring(0,1).toUpperCase() + key.substring(1)] = eventData[key] } ctx['winlog']['event_data'] = updatedEventData"
}
},
{ "set": { "if": "ctx.rule != null && ctx.rule.level == 1", "field": "rule.category", "value": "None" } },
{ "set": { "if": "ctx.rule != null && ctx.rule.level == 2", "field": "rule.category", "value": "System low priority notification" } },
{ "set": { "if": "ctx.rule != null && ctx.rule.level == 3", "field": "rule.category", "value": "Successful/authorized event" } },