Josh Brower
1f9bf45b66
Lowercase network transport
2026-03-24 11:24:59 -04:00
Josh Brower
165e69cd11
Add support for websockets
2026-03-23 07:52:36 -04:00
Josh Patterson
20bf88b338
ensure bool sliders for elasticsearch
2026-03-19 13:52:40 -04:00
Josh Patterson
c2c5aea244
ensure bool sliders for each state:enabled annotation
2026-03-19 12:35:38 -04:00
Josh Patterson
a982056363
Merge remote-tracking branch 'origin/3/dev' into delta
2026-03-18 15:45:15 -04:00
reyesj2
c16ff2bd99
so-idh and so-redis datastream config
2026-03-18 14:31:23 -05:00
Josh Patterson
74ad2990a7
Merge remote-tracking branch 'origin/3/dev' into delta
2026-03-18 13:05:02 -04:00
Jorge Reyes
20c4da50b1
Merge pull request #15632 from Security-Onion-Solutions/reyesj2-15601
...
fix global override settings affecting non-data stream indices
2026-03-18 10:51:17 -05:00
Josh Patterson
e19e83bebb
allow user defined ulimits
2026-03-18 10:38:15 -04:00
Doug Burks
930985b770
update helpLink references for new documentation
2026-03-18 09:46:45 -04:00
Jorge Reyes
346dc446de
Merge pull request #15630 from Security-Onion-Solutions/reyesj2-449
...
use elasticsearch recommended vm.max_map_count
2026-03-17 15:36:06 -05:00
reyesj2
7e7b8dc8a8
vm.max_map_count allow for minion specific values
2026-03-17 15:23:46 -05:00
Josh Patterson
2349750e13
DOCKER to DOCKERMERGED
2026-03-17 16:19:02 -04:00
reyesj2
2c6c502067
use elasticsearch recommended vm.max_map_count
2026-03-17 15:12:29 -05:00
Josh Patterson
00986dc2fd
Merge remote-tracking branch 'origin/delta' into customulimit
2026-03-17 16:04:09 -04:00
Mike Reeves
2d97dfc8a1
Add customizable ulimit settings for all Docker containers
...
Add ulimits as a configurable advanced setting for every container,
allowing customization through the web UI. Move hardcoded ulimits
from elasticsearch and zeek into defaults.yaml and fix elasticsearch
ulimits that were incorrectly nested under the environment key.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-17 15:10:42 -04:00
Josh Patterson
4dc377c99f
DOCKER to DOCKERMERGED
2026-03-17 15:06:06 -04:00
reyesj2
a52e5d0474
update index template priorities + explicity add datastream config options
2026-03-17 13:50:15 -05:00
Josh Patterson
1a7d72c630
ensure empty directory tracked by git
2026-03-17 11:11:02 -04:00
reyesj2
eaf3f10adc
remove unused close/delete configs on datastream index templates
2026-03-16 17:26:45 -05:00
reyesj2
84f4e460f6
update index patterns
2026-03-16 16:53:22 -05:00
reyesj2
88841c9814
remove ilm configs from non-datastream indices
2026-03-16 16:52:42 -05:00
Josh Patterson
94f454c311
cleanup file.absent
2026-03-16 15:57:15 -04:00
Josh Patterson
17881c9a36
cleanup highlander
2026-03-16 15:56:16 -04:00
reyesj2
4d5ace2a89
add file.bytes.missing field mapping
2026-02-24 14:32:01 -06:00
reyesj2
f4be73fdde
re-add event-mappings to kratos index for event.ingested mapping
2026-02-24 14:23:08 -06:00
reyesj2
742649a337
rename kratos file to file.path
2026-02-24 14:21:28 -06:00
reyesj2
32a26559dd
add dns.query.type and dns.query.type_name field mappings
2026-02-24 14:00:06 -06:00
reyesj2
0ebd8e4d6c
migrate elasticsearch:managed_integrations pillar to new manager:managed_integrations pillar
2026-02-18 19:00:35 -06:00
reyesj2
d540b024b2
keep logsdb disabled
2026-01-30 16:02:46 -06:00
reyesj2
2038227308
remove reference to .fleet_final_pipeline-1
...
- configure global@custom ingest pipeline to run .fleet_final_pipeline-1 when available (heavynodes do not have this pipeline).
- Update global@custom pipeline to remove error message related to sending EA logs through logstash (https://github.com/elastic/kibana/issues/183959 )
2026-01-26 14:01:58 -06:00
reyesj2
5d0c187497
format json
2026-01-23 14:45:31 -06:00
Josh Patterson
a192455fae
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-19 17:17:58 -05:00
reyesj2
596bc178df
ensure docker cp command follows container symlinks
2026-01-15 15:18:18 -06:00
Josh Patterson
00fbc1c259
add back individual signing policies
2026-01-12 09:25:15 -05:00
Josh Patterson
3bc552ef38
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-08 17:15:48 -05:00
Josh Patterson
1887d2c0e9
update heavynode pattern
2026-01-08 17:15:00 -05:00
reyesj2
cb1e59fa49
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup
2026-01-07 10:30:45 -06:00
Josh Patterson
f2370043a8
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-06 09:12:00 -05:00
reyesj2
f2b7ffe0eb
align with ECS fieldnames
2026-01-05 14:48:10 -06:00
reyesj2
a53619f10f
update kratos index template
2026-01-05 12:22:01 -06:00
reyesj2
33c34cdeca
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup
2025-12-29 15:49:49 -06:00
reyesj2
7977a020ac
elasticsearch 9.0.8
2025-12-16 16:03:47 -06:00
Josh Patterson
9960db200c
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-12-11 17:30:43 -05:00
Josh Patterson
b9ff1704b0
the great ssl refactor
2025-12-11 17:30:06 -05:00
DefensiveDepth
a945768251
Refactor backup
2025-12-11 11:15:30 -05:00
reyesj2
45a8c0acd1
merge 2.4/dev
2025-12-02 11:16:08 -06:00
reyesj2
cc8fb96047
valid config for number_of_replicas in allocate action includes 0
2025-11-24 11:12:09 -06:00
reyesj2
3339b50daf
drop forcemerge when max_num_segements doesn't exist or empty
2025-11-21 16:39:45 -06:00
reyesj2
415ea07a4f
clean up
2025-11-21 16:04:26 -06:00
