Mike Reeves
|
acc9b8062e
|
Remove Strelka container infrastructure
Removes all Strelka container salt states and infrastructure references,
replaced by the native fileanalyze module in sensoroni.
Removed:
- salt/strelka/ directory (all container states, configs, tools)
- Docker container definitions for 6 Strelka containers
- Firewall rules for strelka_frontend
- Container references in containers.map.jinja
- top.sls and allowed_states references to strelka/strelka.manager
- so-minion add_strelka_to_minion() function and call sites
- so-deny strelka_frontend entry
- Logstash strelka bind mount
- Logrotate strelka config
- Telegraf strelka file monitoring
- so-sensor-clean strelka cleanup
- so-image-common strelka container images
Kept (still needed):
- Elasticsearch index/ingest pipeline (ingests fileanalyze output)
- Elastic agent/fleet log collection config
- SOC strelkaengine (YARA rule management)
- Kibana saved objects (dashboards)
|
2026-04-06 14:57:22 -04:00 |
|
Jason Ertel
|
71839bc87f
|
remove steno
|
2026-03-06 15:45:36 -05:00 |
|
DefensiveDepth
|
ded520c2c1
|
Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor
|
2025-09-17 10:42:43 -04:00 |
|
DefensiveDepth
|
a77157391c
|
remove idstools
|
2025-09-17 10:42:05 -04:00 |
|
reyesj2
|
915b9e7bd7
|
use logrotate
|
2025-09-05 09:22:44 -05:00 |
|
Jason Ertel
|
523ff66389
|
connect work
|
2024-10-16 13:44:01 -04:00 |
|
Wes
|
d203aec44a
|
Remove Curator
|
2023-12-08 19:37:06 +00:00 |
|
m0duspwnens
|
a1b1294247
|
desktop doesnt need docker state
|
2023-08-29 09:05:01 -04:00 |
|
Wes
|
0e047cffad
|
Add to logrotate
|
2023-08-01 20:14:53 +00:00 |
|
Wes
|
c68cd6cf33
|
Fix typo
|
2023-07-20 14:39:35 +00:00 |
|
Wes
|
0b19179630
|
Add logrotate
|
2023-07-19 15:17:42 +00:00 |
|
m0duspwnens
|
7319d7ae9b
|
replace . with _x_
|
2023-06-30 14:18:20 -04:00 |
|
m0duspwnens
|
41a4321b03
|
configure logrotate through soc
|
2023-06-30 11:26:55 -04:00 |
|
m0duspwnens
|
5898c9ef31
|
start of logrotate configurable via ui
|
2023-06-29 12:54:37 -04:00 |
|