Commit Graph

63 Commits

Author SHA1 Message Date
Josh Patterson
cceaebe350 remove restriction of mmap locked on suricata ulimits 2026-03-19 09:42:39 -04:00
Josh Patterson
0814f34f0e don't define zeek nofile, already uses docker default 2026-03-18 13:13:06 -04:00
Josh Patterson
e19e83bebb allow user defined ulimits 2026-03-18 10:38:15 -04:00
Josh Patterson
00986dc2fd Merge remote-tracking branch 'origin/delta' into customulimit 2026-03-17 16:04:09 -04:00
Josh Patterson
d60bef1371 add spft/hard ulimits 2026-03-17 16:00:09 -04:00
Mike Reeves
2d97dfc8a1 Add customizable ulimit settings for all Docker containers
Add ulimits as a configurable advanced setting for every container,
allowing customization through the web UI. Move hardcoded ulimits
from elasticsearch and zeek into defaults.yaml and fix elasticsearch
ulimits that were incorrectly nested under the environment key.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 15:10:42 -04:00
Jason Ertel
71839bc87f remove steno 2026-03-06 15:45:36 -05:00
DefensiveDepth
a77157391c remove idstools 2025-09-17 10:42:05 -04:00
reyesj2
96c56297ce external access via user/pass 2025-04-09 22:08:13 -05:00
Mike Reeves
e4db2f4819 Update defaults.yaml 2024-12-10 17:19:15 -05:00
Jason Ertel
5e6dd2e8b3 connect 2024-10-23 16:49:02 -04:00
Jason Ertel
1537b69457 connect wip 2024-10-17 11:25:40 -04:00
Jason Ertel
523ff66389 connect work 2024-10-16 13:44:01 -04:00
reyesj2
dff609d829 Add basic read-only metric collection from Kafka
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-05-08 16:13:09 -04:00
reyesj2
e960ae66a3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka 2024-05-02 15:12:27 -04:00
m0duspwnens
73b5bb1a75 add memlock to so-suricata container 2024-04-24 15:35:17 -04:00
m0duspwnens
18f95e867f port 9093 for kafka docker 2024-04-03 10:24:53 -04:00
m0duspwnens
e25bc8efe4 Merge remote-tracking branch 'origin/reyesj2/kafka' into kaffytaffy 2024-04-02 13:36:47 -04:00
DefensiveDepth
d7ecad4333 Initial cut to remove Playbook and deps 2024-03-25 19:42:31 -04:00
reyesj2
446f1ffdf5 merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-03-25 13:55:48 -04:00
m0duspwnens
2f03248612 use different nginx defaults for so-fleet node hosting artifacts 2024-01-31 16:25:09 -05:00
Wes
d203aec44a Remove Curator 2023-12-08 19:37:06 +00:00
reyesj2
8cf29682bb Update to merge in 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2023-11-29 13:41:23 -05:00
reyesj2
86dc7cc804 Kafka init
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2023-11-29 13:34:25 -05:00
Wes
ce05f29dc4 Add port_bindings for port 514 2023-08-30 13:03:28 +00:00
m0duspwnens
00483018ca change docker bip to gateway 2023-07-24 13:38:14 -04:00
m0duspwnens
9bda01bd29 change ranges 2023-07-24 10:40:23 -04:00
m0duspwnens
db09b465bd change default docker net/range 2023-07-24 09:23:13 -04:00
m0duspwnens
36a936d3d6 docker ips changes 2023-07-21 16:06:52 -04:00
Josh Brower
a9585b2a7f Fix Elastic Agent for Heavy 2023-06-23 10:45:58 -04:00
Mike Reeves
86803f1fb5 Add Suricata 2023-05-24 10:48:01 -04:00
Mike Reeves
debbdec350 Allow additional docker parameters 2023-05-18 17:10:18 -04:00
Mike Reeves
bf4ac0c2dd Allow additional docker parameters 2023-05-18 17:08:39 -04:00
Mike Reeves
cb9e7e63db Allow additional docker parameters 2023-05-18 17:00:54 -04:00
Mike Reeves
32560af767 Allow additional docker parameters 2023-05-18 16:59:45 -04:00
Mike Reeves
0fd9fb9294 Allow additional docker parameters 2023-05-18 15:19:09 -04:00
Mike Reeves
a4cd695cc8 Airgap Rules Fix 2023-05-11 16:00:07 -04:00
Mike Reeves
789eafa8c2 Fix string entry 2023-05-08 09:45:08 -04:00
Mike Reeves
2418d9a096 Add volume mounts 2023-05-05 16:01:23 -04:00
Josh Brower
544fa824ea Initial cut for Artifact Registry 2023-05-02 14:17:59 -04:00
Josh Brower
af392681e3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into fleet-sa 2023-04-03 07:27:04 -04:00
Mike Reeves
8c2a43c073 Adjust docker annotations 2023-03-20 15:51:48 -04:00
Mike Reeves
fe13f90394 Adjust docker annotations 2023-03-20 15:33:22 -04:00
Mike Reeves
1289500e03 unfix playbook fix 2023-02-24 09:55:49 -05:00
m0duspwnens
6dd09fb2c5 remove filebeat 2023-02-22 10:42:45 -05:00
Josh Brower
b62cc32b1a Initial support for IDH 2023-02-21 11:52:37 -05:00
Jason Ertel
ea0c3db8e1 upgrade influxdb 2023-02-08 13:23:45 -05:00
m0duspwnens
e0e094cd95 rename sosbip and sosrange to sobip and sorange 2023-02-03 10:10:51 -05:00
Josh Brower
18a54b86f4 More fixes 2023-01-31 14:57:39 -05:00
m0duspwnens
d163d834d4 allow for binding ip and ports to different port number 2023-01-12 16:42:45 -05:00