  weslambertandGitHub
|
915c3f3c95
|
Merge pull request #13791 from Security-Onion-Solutions/fix/fleet_custom
Use ID instead of name for getting integrations from agent policies
|
2024-10-09 14:12:40 -04:00 |
|
|
weslambertandGitHub
|
c58ed45cf0
|
Use ID instead of name
|
2024-10-08 10:55:16 -04:00 |
|
|
weslambertandGitHub
|
69857b6b5c
|
Use ID instead of name
|
2024-10-08 10:54:54 -04:00 |
|
|
weslambertandGitHub
|
8e8e584087
|
Merge pull request #13736 from Security-Onion-Solutions/fix/elastic_template_retry
Retry after 1 second
|
2024-09-25 13:08:36 -04:00 |
|
|
weslambertandGitHub
|
aacd715379
|
Retry after 1 second
|
2024-09-25 13:07:01 -04:00 |
|
|
weslambertandGitHub
|
0bcf9e6be7
|
Merge pull request #13732 from Security-Onion-Solutions/fix/elastic_templates_latest
Check if running during soup
|
2024-09-25 09:37:02 -04:00 |
|
|
weslambertandGitHub
|
50ae37c160
|
Check if running during soup
|
2024-09-25 08:25:20 -04:00 |
|
|
weslambertandGitHub
|
9c7bedb715
|
Merge pull request #13724 from Security-Onion-Solutions/fix/integration_fields
Fix core integration field mappings
|
2024-09-23 17:44:46 -04:00 |
|
|
Wes
|
70c5a07913
|
Add back meta ad error.message
|
2024-09-23 21:36:40 +00:00 |
|
|
Wes
|
41112a59ec
|
Add back meta
|
2024-09-23 20:12:14 +00:00 |
|
|
Wes
|
764eb98bc2
|
Add custom component for ints
|
2024-09-17 19:43:13 +00:00 |
|
|
weslambertandGitHub
|
4575b502a8
|
Merge pull request #13686 from Security-Onion-Solutions/fix/opnsense_pfsense_suri_alerts
Fix suricata alerts for opnsense and pfsense
|
2024-09-17 15:33:57 -04:00 |
|
|
Wes
|
cf0d56eee7
|
Fix suricata alerts for opnsense and pfsense
|
2024-09-17 19:24:31 +00:00 |
|
|
weslambertandGitHub
|
5c8772774f
|
Merge pull request #13651 from Security-Onion-Solutions/feature/integration_upgrade
Upgrade Elastic integrations when new versions are available
|
2024-09-13 18:07:15 -04:00 |
|
|
weslambertandGitHub
|
57e06dced2
|
Change message
|
2024-09-13 13:52:01 -04:00 |
|
|
weslambertandGitHub
|
973b93e332
|
Remove check for error
|
2024-09-13 13:49:53 -04:00 |
|
|
weslambertandGitHub
|
bc71af7a1f
|
Check status
|
2024-09-13 13:27:26 -04:00 |
|
|
weslambertandGitHub
|
fa33348910
|
Change message
|
2024-09-13 13:26:17 -04:00 |
|
|
weslambertandGitHub
|
da47d247c9
|
Remove check for cookie
|
2024-09-13 13:24:55 -04:00 |
|
|
weslambertandGitHub
|
9bd7909983
|
Merge pull request #13666 from Security-Onion-Solutions/m0duspwnens-patch-1
exit 1 if unable to connect to kibana
|
2024-09-13 10:58:31 -04:00 |
|
|
weslambertandGitHub
|
662f906f9d
|
Remove IFS
|
2024-09-13 09:16:53 -04:00 |
|
|
weslambertandGitHub
|
2e85dcc36a
|
Set IFS
|
2024-09-12 17:59:39 -04:00 |
|
|
weslambertandGitHub
|
2ec3f52ea6
|
Don't use state; set IFS
|
2024-09-12 17:57:41 -04:00 |
|
|
weslambertandGitHub
|
a12e2e2022
|
Merge pull request #13661 from Security-Onion-Solutions/feature/idh_custom_skins
Allow custom IDH skins
|
2024-09-12 16:38:28 -04:00 |
|
|
Wes
|
1463b35e2e
|
Change name
|
2024-09-12 15:31:12 +00:00 |
|
|
Wes
|
6518088de7
|
Allow custom IDH skins
|
2024-09-12 15:30:11 +00:00 |
|
|
weslambertandGitHub
|
31d190cbf4
|
Merge pull request #13660 from Security-Onion-Solutions/fix/integration_annotations
Fix annotations typo
|
2024-09-12 10:56:43 -04:00 |
|
|
weslambertandGitHub
|
24504dcc87
|
Fix annotations typo
|
2024-09-12 10:54:13 -04:00 |
|
|
weslambertandGitHub
|
742fa4cbd6
|
Merge pull request #13658 from Security-Onion-Solutions/fix/annotation_barrcuda_imperva
Add annotations for barracuda and imperva
|
2024-09-11 15:59:25 -04:00 |
|
|
weslambertandGitHub
|
7f65d122a8
|
Remove echo
|
2024-09-11 15:54:34 -04:00 |
|
|
weslambertandGitHub
|
602158aa56
|
Add annotations for barracuda and imperva
|
2024-09-11 15:52:23 -04:00 |
|
|
weslambertandGitHub
|
4c9bbeb5b7
|
Merge pull request #13657 from Security-Onion-Solutions/feature/integrations_barracuda_imperva
Add barracuda and imperva integrations
|
2024-09-11 15:47:21 -04:00 |
|
|
Wes
|
f2bb54d993
|
Add barracuda and imperva integrations
|
2024-09-11 19:41:38 +00:00 |
|
|
Wes
|
e4fa47f27e
|
Fix common source
|
2024-09-11 15:01:30 +00:00 |
|
|
Wes
|
061f42626c
|
Add functions to common
|
2024-09-11 15:00:55 +00:00 |
|
|
Wes
|
5112f5c9ce
|
Run upgrade during state apply
|
2024-09-11 14:58:01 +00:00 |
|
|
Wes
|
409612ff1f
|
Add script to upgrade integrations
|
2024-09-11 14:56:57 +00:00 |
|
|
weslambertandGitHub
|
3b5af6bdd4
|
Merge pull request #13639 from Security-Onion-Solutions/fix/system_destination_ip
Add destination IP for so-system
|
2024-09-09 16:18:21 -04:00 |
|
|
Wes
|
25a9fb9b5c
|
Add destination IP for so-system
|
2024-09-09 20:16:23 +00:00 |
|
|
weslambertandGitHub
|
a11e78176f
|
Merge pull request #13587 from Security-Onion-Solutions/fix/hotfix_date
Update HOTFIX
|
2024-08-30 16:21:03 -04:00 |
|
|
weslambertandGitHub
|
db4c373c45
|
Merge pull request #13586 from Security-Onion-Solutions/fix/so-system-mappings
Add so-system-mappings
|
2024-08-30 16:20:28 -04:00 |
|
|
weslambertandGitHub
|
5be17330d1
|
Update HOTFIX
|
2024-08-30 16:14:42 -04:00 |
|
|
weslambertandGitHub
|
a7de6993f9
|
Add so-system-mappings
|
2024-08-30 16:11:41 -04:00 |
|
|
weslambertandGitHub
|
8943e88ca8
|
Merge pull request #13562 from Security-Onion-Solutions/fix/evtx_pipelines
Update pipeline version for EVTX
|
2024-08-27 13:12:10 -04:00 |
|
|
weslambertandGitHub
|
af80a78406
|
Update pipeline version
|
2024-08-27 13:08:35 -04:00 |
|
|
weslambertandGitHub
|
1cac2ff1d4
|
Merge pull request #13554 from Security-Onion-Solutions/fix/ilm_soc_logs
FIX: Add so-soc-logs
|
2024-08-26 12:54:03 -04:00 |
|
|
weslambertandGitHub
|
a93c77a1cc
|
Merge pull request #13548 from Security-Onion-Solutions/fix/global_custom
Use global@custom from common pipeline
|
2024-08-26 10:42:12 -04:00 |
|
|
weslambertandGitHub
|
dd09f5b153
|
Add so-soc-logs
|
2024-08-26 10:32:27 -04:00 |
|
|
weslambertandGitHub
|
e96a0108c3
|
Add global@custom
|
2024-08-23 13:05:34 -04:00 |
|
|
weslambertandGitHub
|
96339f0de6
|
Merge pull request #13537 from Security-Onion-Solutions/fix/elastic_template_check
FIX: Check Elasticsearch for endpoint component template before loading templates
|
2024-08-22 10:46:49 -04:00 |
|
|
weslambertandGitHub
|
d7e3e134a5
|
Check Elasticsearch for template
|
2024-08-22 10:33:13 -04:00 |
|
|
weslambertandGitHub
|
2a024039bf
|
Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm
Create detections.alerts ILM policy with corresponding name
|
2024-08-21 14:50:10 -04:00 |
|
|
weslambertandGitHub
|
212cc478de
|
Change back to so
|
2024-08-21 14:39:24 -04:00 |
|
|
weslambertandGitHub
|
88ea60df2a
|
Fix name
|
2024-08-21 14:38:57 -04:00 |
|
|
weslambertandGitHub
|
c1b7232a88
|
Fix for detections-alerts
|
2024-08-21 14:38:29 -04:00 |
|
|
weslambertandGitHub
|
18ef37a2d0
|
Merge pull request #13531 from Security-Onion-Solutions/fix/elastic_templates_fleet_package_check
Check for endpoint package
|
2024-08-21 14:28:12 -04:00 |
|
|
weslambertandGitHub
|
4108e67178
|
Check for endpoint package
|
2024-08-21 14:22:28 -04:00 |
|
|
weslambertandGitHub
|
4afac201b9
|
Change ILM policy name
|
2024-08-21 13:25:26 -04:00 |
|
|
weslambertandGitHub
|
c30537fe6a
|
Ensure endpoint is installed
|
2024-08-21 13:00:04 -04:00 |
|
|
weslambertandGitHub
|
1ed73b6f8e
|
Merge pull request #13526 from Security-Onion-Solutions/feature/tenable_io
Add Tenable IO
|
2024-08-21 09:03:33 -04:00 |
|
|
weslambertandGitHub
|
e772497e12
|
Merge pull request #13511 from Security-Onion-Solutions/fix/logcheck_unprovisioned
Ignore older SOC logs before licenseStatus field
|
2024-08-16 14:48:56 -04:00 |
|
|
weslambertandGitHub
|
205bbd9c61
|
Use more specific match
|
2024-08-16 14:31:11 -04:00 |
|
|
weslambertandGitHub
|
224bc6b429
|
Ignore old SOC logs before licenseStatus
|
2024-08-16 14:15:10 -04:00 |
|
|
weslambertandGitHub
|
dc197f6a5c
|
Add tenable settings
|
2024-08-15 23:06:53 -04:00 |
|
|
weslambertandGitHub
|
f182833a8d
|
Add tenable_io
|
2024-08-15 23:03:32 -04:00 |
|
|
weslambertandGitHub
|
61ab1f1ef2
|
Add tenable_io templates
|
2024-08-15 23:03:07 -04:00 |
|
|
weslambertandGitHub
|
4c276d1211
|
Merge pull request #13482 from Security-Onion-Solutions/fix/cluster_space_total_field
Update column number because of changes to API
|
2024-08-15 08:29:39 -04:00 |
|
|
weslambertandGitHub
|
5f74b1b730
|
Update column number because of changes to API
|
2024-08-15 08:26:56 -04:00 |
|
|
weslambertandGitHub
|
114ad779b4
|
Merge pull request #13418 from Security-Onion-Solutions/fix/system_mapping
Change name for system component
|
2024-07-31 16:27:32 -04:00 |
|
|
weslambertandGitHub
|
49d2ac2b13
|
Change name for system component
|
2024-07-31 16:17:57 -04:00 |
|
|
weslambertandGitHub
|
9a2252ed3f
|
Merge pull request #13414 from Security-Onion-Solutions/fix/system_mapping
Fix system mapping
|
2024-07-31 14:26:50 -04:00 |
|
|
Wes
|
9264a03dbc
|
Add custom system component
|
2024-07-31 17:03:26 +00:00 |
|
|
Wes
|
fb2a42a9af
|
Use custom system component
|
2024-07-31 17:02:45 +00:00 |
|
|
weslambertandGitHub
|
63531cdbb6
|
Merge pull request #13410 from Security-Onion-Solutions/fix/elastic_agent_pipeline_version
Change agent pipeline version
|
2024-07-30 17:00:15 -04:00 |
|
|
weslambertandGitHub
|
bae348bef7
|
Change version
|
2024-07-30 16:44:44 -04:00 |
|
|
weslambertandGitHub
|
bd223d8643
|
Merge pull request #13409 from Security-Onion-Solutions/fix/elastic_fleet_defender
Fix defender winlog name change
|
2024-07-30 15:47:45 -04:00 |
|
|
weslambertandGitHub
|
3fa6c72620
|
Fix name change
|
2024-07-30 15:45:55 -04:00 |
|
|
weslambertandGitHub
|
2b90bdc86a
|
Merge pull request #13408 from Security-Onion-Solutions/fix/fleet_setup
Fix fleet setup
|
2024-07-30 14:49:29 -04:00 |
|
|
weslambertandGitHub
|
6831b72804
|
Fix fleet setup
|
2024-07-30 14:46:00 -04:00 |
|
|
weslambertandGitHub
|
5e12b928d9
|
Merge pull request #13407 from Security-Onion-Solutions/fix/merge_revert
Add removed changes
|
2024-07-30 13:04:28 -04:00 |
|
|
weslambertandGitHub
|
0453f51e64
|
Actually ignore missing templates
|
2024-07-30 12:54:07 -04:00 |
|
|
weslambertandGitHub
|
9594e4115c
|
Elastic 8.14.3
|
2024-07-30 12:47:56 -04:00 |
|
|
weslambertandGitHub
|
201e14f287
|
Elastic 8.14.3
|
2024-07-30 12:46:42 -04:00 |
|
|
weslambertandGitHub
|
d833bd0d55
|
Elastic 8.14.3
|
2024-07-30 12:45:25 -04:00 |
|
|
weslambertandGitHub
|
46eeb014af
|
Add metrics settings
|
2024-07-30 12:39:50 -04:00 |
|
|
weslambertandGitHub
|
8e7a2cf353
|
Ignore missing templates
|
2024-07-30 12:38:29 -04:00 |
|
|
weslambertandGitHub
|
b466d83625
|
Merge pull request #13402 from Security-Onion-Solutions/foxtrot
Elastic 8.14.3
|
2024-07-30 09:28:19 -04:00 |
|
|
weslambertandGitHub
|
6d008546f1
|
Fix pre and add post for 2.4.100
|
2024-07-30 09:26:46 -04:00 |
|
|
weslambertandGitHub
|
c60b14e2e7
|
Merge branch '2.4/dev' into foxtrot
|
2024-07-30 08:52:48 -04:00 |
|
|
weslambertandGitHub
|
c753a7cffa
|
Add function for 2.4.100
|
2024-07-29 13:18:07 -04:00 |
|
|
weslambertandGitHub
|
5cba4d7d9b
|
Update VERSION
|
2024-07-29 13:16:14 -04:00 |
|
|
weslambertandGitHub
|
f2ad4c40e6
|
Fix update for 2.4.90
|
2024-07-24 10:38:05 -04:00 |
|
|
weslambertandGitHub
|
8538f2eca2
|
Elastic Agent update
|
2024-07-24 09:40:30 -04:00 |
|
|
Wes
|
c55fa6dc6a
|
Fix pattern for pipelines
|
2024-07-23 17:48:32 +00:00 |
|
|
Wes
|
17f37750e5
|
Remove onchanges condition
|
2024-07-23 16:46:18 +00:00 |
|
|
Wes
|
e789c17bc3
|
Add global@custom pipeline file
|
2024-07-23 16:37:37 +00:00 |
|
|
Wes
|
6f44d39b18
|
Remove Fleet final pipeline file
|
2024-07-23 16:37:03 +00:00 |
|
|
Wes
|
dd85249781
|
Remove Fleet final pipeline
|
2024-07-23 16:36:41 +00:00 |
|
|
Wes
|
bdba621442
|
Remove soup changes
|
2024-07-23 16:32:28 +00:00 |
|
|
Wes
|
612716ee69
|
Apply ES to load pipelines
|
2024-07-17 17:35:41 +00:00 |
|