415 Commits

Author SHA1 Message Date
m0duspwnens
e2ccebd2fa resolve conflicts 2020-02-20 17:00:15 -05:00
m0duspwnens
2b34bdece9 logstash cleanup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326 2020-02-20 16:47:40 -05:00
weslambert
fc9786e541 Change template name 2020-02-20 11:46:15 -05:00
weslambert
6945cbb843 Change template name 2020-02-20 11:45:50 -05:00
weslambert
30a1197b44 Rename template to avoid duplication under different name 2020-02-20 11:20:06 -05:00
m0duspwnens
7604853c59 fix logic for logstash pipelines 2020-02-19 16:02:24 -05:00
m0duspwnens
54e94676fe fix pipelines variable 2020-02-19 14:59:39 -05:00
m0duspwnens
408b3695e0 add back deleted states to logstash state 2020-02-19 14:12:18 -05:00
m0duspwnens
c396342aea fix syntax error with new ls pipeline config 2020-02-19 13:46:52 -05:00
m0duspwnens
6a7580404d directory cleanup - logstash pipeline rework 2020-02-19 13:08:14 -05:00
Wes Lambert
50fcf8307f Add initia/basic Strelka config 2020-02-18 02:46:31 +00:00
Wes Lambert
64166f96a1 Ensure correct template is used 2020-02-17 21:15:11 +00:00
Wes Lambert
8d9ff4428b Update Strelka LS config 2020-02-17 21:12:25 +00:00
Wes Lambert
11319362c4 Fix Wazuh archives path 2020-02-13 18:47:45 +00:00
Wes Lambert
41db668af6 update Wazuh data paths 2020-02-11 22:16:25 +00:00
Wes Lambert
0994f598c7 update Wazuh paths 2020-02-11 13:45:28 +00:00
Mike Reeves
521de8f154 Update 9997_output_helix.conf 2020-02-10 22:47:11 -05:00
Mike Reeves
6ceb127c46 Fix Wazuh paths for logstash/fb 2020-02-07 08:52:09 -05:00
Wes Lambert
ec11b9ea25 Remove Redis config from eval PL 2020-02-05 20:34:32 +00:00
m0duspwnens
799cf32265 fix logstash for so-helix role 2020-02-05 14:45:07 -05:00
Josh Brower
c1dd26d97e Logstash EVAL pipeline fix - osquery 2020-02-05 08:12:08 -05:00
m0duspwnens
6b580eaba9 evalmode fix 2020-01-30 17:54:24 -05:00
m0duspwnens
68e7dcfba0 evalfix 2020-01-30 17:38:48 -05:00
m0duspwnens
88967c2512 evalfix 2020-01-30 17:36:38 -05:00
m0duspwnens
d94065fa00 evalfix 2020-01-30 17:09:06 -05:00
Mike Reeves
1e0d0d74e1 Fix Eval Event Pickup x2 2020-01-30 16:16:21 -05:00
Mike Reeves
c32b2726fa Fix Eval Event Pickup 2020-01-30 16:10:59 -05:00
Mike Reeves
59d6b7cb8a Add log paths 2020-01-30 16:00:57 -05:00
m0duspwnens
bd5b597aed heavynode 2020-01-29 12:56:25 -05:00
m0duspwnens
306cc1127b heavynode 2020-01-29 12:56:25 -05:00
Wes Lambert
fbb9f099f9 Update Elastic state files 2020-01-28 14:49:58 +00:00
Mike Reeves
e038a8b731 Merge branch 'dev' into feature/issue124 2020-01-21 16:48:26 -05:00
m0duspwnens
a39edad3f6 changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124 2020-01-21 16:39:42 -05:00
William Wernert
54fb2ad244 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into feature/registry
# Conflicts:
#	salt/common/init.sls
#	salt/elasticsearch/init.sls
#	salt/filebeat/init.sls
#	salt/hive/init.sls
#	salt/kibana/init.sls
#	salt/logstash/init.sls
#	salt/suricata/init.sls
#	salt/tcpreplay/init.sls
#	salt/wazuh/init.sls
2020-01-14 15:48:56 -05:00
Mike Reeves
e141443238 Fix some contianer links 2020-01-14 11:05:36 -05:00
Mike Reeves
ae55b59048 Switch to using images in registry 2020-01-14 10:11:26 -05:00
Wes Lambert
7e1870e9d0 update image versions 2020-01-13 13:52:30 +00:00
m0duspwnens
ed28be4ba9 rename logstash config for storage to search - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/176 2019-12-20 11:32:55 -05:00
Mike Reeves
e49de63460 Helix - Final Parser Fixes 2019-12-13 13:59:29 -05:00
Mike Reeves
fdbb223155 Helix - Add geo 2019-12-13 11:52:43 -05:00
Mike Reeves
e263d72813 Setup - Add sensor pillar to Helix 2019-12-13 11:46:30 -05:00
Mike Reeves
79d48f9e77 Logstash - Fix helix output typeo 2019-12-12 15:17:19 -05:00
Mike Reeves
bd9b1957ba Logstash - Fix helix output 2019-12-12 14:12:51 -05:00
Mike Reeves
989641eb5a Setup - Fix prompts and disable onion user if iso 2019-12-11 13:44:40 -05:00
Mike Reeves
e134071295 Helix - Change Parsers for Helix 2019-12-10 13:50:27 -05:00
Mike Reeves
ae3c428941 Helix Logstash Changes 2019-12-10 10:02:41 -05:00
Mike Reeves
4c4cdb7189 Helix changes and Wazuh 2019-12-09 16:27:03 -05:00
Mike Reeves
3904c19333 Change Variables to UperCase 2019-12-09 10:04:14 -05:00
m0duspwnens
599341483e adding api key for Helix 2019-12-09 09:59:28 -05:00
Mike Reeves
362cd0487f Additional Helix Support 2019-12-09 09:52:52 -05:00