Josh Patterson
d6263812a6
move daemon.json to docker/files
2026-03-17 15:09:09 -04:00
Josh Patterson
744d8fdd5e
Merge pull request #15620 from Security-Onion-Solutions/mreeves/remove-non-oracle9-salt
...
Remove non-Oracle Linux 9 support from salt states
2026-03-16 17:10:24 -04:00
Mike Reeves
afc14ec29d
Remove non-Oracle Linux 9 support from salt states
...
Simplifies salt states, map files, and modules to only support
Oracle Linux 9, removing all Debian/Ubuntu/CentOS/Rocky/AlmaLinux/RHEL
conditional branches.
2026-03-16 16:58:39 -04:00
Josh Patterson
59134c65d0
Merge pull request #15619 from Security-Onion-Solutions/mreeves/remove-non-oracle9-support
...
Remove support for non-Oracle Linux 9 operating systems
2026-03-16 16:55:59 -04:00
Mike Reeves
d2cee468a0
Remove support for non-Oracle Linux 9 operating systems
...
Security Onion now exclusively supports Oracle Linux 9. This removes
detection, setup, and update logic for Ubuntu, Debian, CentOS, Rocky,
AlmaLinux, and RHEL.
2026-03-16 16:44:07 -04:00
Josh Patterson
94f454c311
cleanup file.absent
2026-03-16 15:57:15 -04:00
Josh Patterson
75cddbf444
set container ulimits to default
2026-03-11 14:46:29 -04:00
Jason Ertel
7f07c96a2f
pcapout still used for extracts
2026-03-09 14:58:27 -04:00
Jason Ertel
e8adea3022
restore pcapout since it's still used
2026-03-07 08:20:08 -05:00
Jason Ertel
71839bc87f
remove steno
2026-03-06 15:45:36 -05:00
Jason Ertel
2c4d833a5b
update 2.4 references to 3
2026-03-05 11:05:19 -05:00
Jason Ertel
863276e24f
Merge pull request #15539 from Security-Onion-Solutions/jertel/wip
...
prepare for nextgen docs
2026-02-27 13:18:47 -05:00
Jason Ertel
9bd5e1897a
prepare for nextgen docs
2026-02-27 13:09:55 -05:00
Josh Patterson
78ae6cd84c
upgrade docker
2026-02-20 12:29:23 -05:00
reyesj2
6ce6eb95d6
use existing retry
2026-01-29 15:54:36 -06:00
reyesj2
b3d1dd51a4
initialize specific indices as needed
2026-01-29 15:41:39 -06:00
reyesj2
6b1939b827
exclude known issues with 3 integrations
2026-01-27 12:59:17 -06:00
reyesj2
55b3fa389e
no dates
2026-01-23 16:33:22 -06:00
reyesj2
b3ae716929
ignore kratos file mapping error
2026-01-23 16:31:30 -06:00
Josh Patterson
f6bde3eb04
remove double logging
2026-01-20 11:56:31 -05:00
Josh Patterson
a192455fae
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-19 17:17:58 -05:00
reyesj2
d430ed6727
false positive
2026-01-15 15:25:28 -06:00
reyesj2
349d77ffdf
exclude kafka restart error
2026-01-15 14:43:57 -06:00
Josh Patterson
152f2e03f1
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-06 15:15:30 -05:00
Jason Ertel
2d705e7caa
exempt kratos online check
2026-01-06 09:47:35 -05:00
Josh Patterson
9878d9d37e
handle steno ca certs directory properly
2025-12-12 19:07:00 -05:00
Josh Patterson
1475f0fc2f
timestamp logging for wait_for_salt_minion
2025-12-12 16:30:42 -05:00
Josh Patterson
8158fee8fc
change how we determine if the salt-minion is ready
2025-12-12 15:24:47 -05:00
DefensiveDepth
f15a39c153
Add historical hashes
2025-12-03 11:24:04 -05:00
DefensiveDepth
9a6ff75793
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
2025-11-12 08:51:51 -05:00
Josh Patterson
e3972dc5af
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-11-10 13:28:42 -05:00
Josh Patterson
274295bc97
return exit codes
2025-11-07 17:39:13 -05:00
reyesj2
a84df14137
rename forward node -> sensor node
2025-11-06 15:23:55 -06:00
DefensiveDepth
2f6fb717c1
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
2025-11-06 10:38:37 -05:00
reyesj2
635545630b
strelka use single master image
2025-11-03 09:36:46 -06:00
Josh Patterson
1949be90c2
allow to preserve files
2025-10-29 16:49:59 -04:00
Josh Patterson
dca38c286a
Merge pull request #15137 from Security-Onion-Solutions/amv
...
allow user to create VMs that mount virtual disk for /nsm. new nsm_total grain
2025-10-14 11:25:57 -04:00
Jorge Reyes
1c5a72ee85
Merge pull request #15124 from Security-Onion-Solutions/reyesj2/es-8188
...
ignore error for elastic-fleet agent
2025-10-08 14:13:46 -05:00
reyesj2
8a8ea04088
ignore error for elastic-fleet agent
2025-10-08 14:01:18 -05:00
Josh Patterson
4ab4264f77
merge
2025-10-07 12:26:58 -04:00
Josh Patterson
ac0d6c57e1
create common.grains state and nsm_total grain
2025-10-06 11:52:35 -04:00
Jason Ertel
030e4961d7
updates for wiretap lib
2025-10-01 12:13:56 -04:00
reyesj2
c92dc580a2
centralize MINION_ROLE lookup_role
2025-09-19 13:17:52 -05:00
reyesj2
d03dd7ac2d
check for oom kill only in the last 24 hours
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-09-19 11:32:13 -05:00
reyesj2
c9db52433f
add oom check to so-log-check
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-09-19 11:08:42 -05:00
DefensiveDepth
a77157391c
remove idstools
2025-09-17 10:42:05 -04:00
reyesj2
84b38daf62
name destination_geo & source_geo to destination.as and source.as better aligning with ECS and linking other log sources already using .as for ASN geo data.
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-07-25 16:17:22 -05:00
reyesj2
415f456661
ignore composable templates with error in the name
2025-07-12 08:30:04 -05:00
Jason Ertel
3056410fd1
Merge pull request #14828 from Security-Onion-Solutions/jertel/wip
...
exclude component updates indexes with error in the name
2025-07-10 07:51:34 -04:00
Jason Ertel
bf8da60605
exclude component updates indexes with error in the name
2025-07-10 07:47:53 -04:00
