3598 Commits

Author	SHA1	Message	Date
m0duspwnens	03487c2a31	change suricata clean cron to run once a day	2021-02-18 14:06:45 -05:00
m0duspwnens	95df18c545	limit eve logs and gz files based on days	2021-02-18 10:45:20 -05:00
m0duspwnens	a4d5f58256	fix surilogcompress	2021-02-18 10:33:47 -05:00
m0duspwnens	74ca4487de	ensure at least 2 eve files are kept https://github.com/Security-Onion-Solutions/securityonion/issues/2989	2021-02-18 09:51:40 -05:00
m0duspwnens	4b07d5e457	add identifier to eve clean cron	2021-02-18 09:39:54 -05:00
m0duspwnens	041d193f2d	fix brackets	2021-02-18 09:37:37 -05:00
m0duspwnens	0bef8b6662	limit number of eve.json files for suricata https://github.com/Security-Onion-Solutions/securityonion/issues/2989	2021-02-18 09:26:59 -05:00
m0duspwnens	7a595df5b6	strelka logrotate - https://github.com/Security-Onion-Solutions/securityonion/issues/2736	2021-02-17 11:17:41 -05:00
m0duspwnens	2b07d89b5a	error: /opt/so/conf/sensor-rotate.conf:8 unknown option 'endscript' -- ignoring line	2021-02-17 11:01:18 -05:00
m0duspwnens	e6ae1af85f	test rotating strelka log at 100k	2021-02-17 10:47:06 -05:00
Josh Patterson	fddef1a6f4	Merge pull request #2985 from Security-Onion-Solutions/issue/2915 ... remove old backup files	2021-02-17 09:43:58 -05:00
doug	fabe3c87f2	Hunt: improve Wazuh queries #2383	2021-02-16 11:56:14 -05:00
m0duspwnens	7099ed4bf5	delete many backup files	2021-02-16 11:55:49 -05:00
m0duspwnens	1ccc5480e1	remove oldest backup	2021-02-16 11:40:45 -05:00
doug	397d8d0964	Kibana 7.10.2 config changes #2954	2021-02-14 07:04:51 -05:00
doug	3248edea8b	Update Kibana dashboard hyperlinks to new url format #2361	2021-02-12 17:25:42 -05:00
doug	31a0c2bc82	Update Kibana dashboard hyperlinks to new url format #2361	2021-02-12 15:37:25 -05:00
doug	797d2c4dba	Kibana 7.10.2 config changes #2954	2021-02-12 15:35:06 -05:00
Doug Burks	fd4cb0b7a8	Kibana 7.10.2 config changes #2954	2021-02-12 14:05:29 -05:00
Doug Burks	c717773fc3	Kibana 7.10.2 config changes #2954	2021-02-12 14:04:00 -05:00
Josh Patterson	a8598a50e4	Merge pull request #2953 from Security-Onion-Solutions/issue/2756 ... remove /etc/yum.repos.d/salt-2019-2-5.repo if present	2021-02-12 12:05:21 -05:00
m0duspwnens	3b0c2b3e91	remove /etc/yum.repos.d/salt-2019-2-5.repo if present https://github.com/Security-Onion-Solutions/securityonion/issues/2756	2021-02-12 12:04:08 -05:00
m0duspwnens	7e4d7a6985	drop icmp timestamp replies https://github.com/Security-Onion-Solutions/securityonion/issues/1704	2021-02-11 11:09:21 -05:00
m0duspwnens	3cfbc61f4e	only save at the end	2021-02-10 11:15:39 -05:00
Mike Reeves	125f7d6262	add warm node action for hot/warm	2021-02-08 11:49:49 -05:00
Mike Reeves	5043b970ef	Fix tar syntax	2021-02-06 19:14:44 -05:00
Mike Reeves	a3ca84db66	Fix backupdir name state	2021-02-06 15:32:42 -05:00
Mike Reeves	bf79c92456	Lock down Backups folder permissions	2021-02-05 22:31:08 -05:00
Mike Reeves	8f97973fac	Lock down Backups folder permissions	2021-02-05 22:17:31 -05:00
Jason Ertel	e427f8178d	Implement locking to so-firewall script	2021-02-04 16:06:11 -05:00
Jason Ertel	a13b31fbcc	Merge branch 'dev' into automation/ami	2021-02-04 16:05:39 -05:00
Jason Ertel	58e4205602	Revert "Make filebeat retry forever"	2021-02-03 21:46:29 -05:00
Jason Ertel	6b54a29ac7	Remove 'new user' references from so-user	2021-02-03 15:23:58 -05:00
Jason Ertel	3ebedcd4e8	Merge pull request #2830 from Security-Onion-Solutions/filebeatlimits ... Make filebeat retry forever	2021-02-03 11:32:05 -05:00
Mike Reeves	55a8f6aa7a	Make filebeat retry forever	2021-02-02 16:41:52 -05:00
William Wernert	8f0b0ac936	Merge pull request #2825 from Security-Onion-Solutions/foxtrot ... Setup: dpkg retry, whiptail changes, fix zeek state condition	2021-02-02 14:41:48 -05:00
m0duspwnens	b3c08229db	Merge remote-tracking branch 'remotes/origin/sslstate/timeouts_retry' into delta	2021-02-01 15:33:31 -05:00
m0duspwnens	8cf0a3da98	remove seconds	2021-02-01 15:19:47 -05:00
William Wernert	8d01b87ab5	Merge branch 'dev' into foxtrot	2021-02-01 13:56:33 -05:00
m0duspwnens	8ff6d1639a	Merge remote-tracking branch 'remotes/origin/dev' into issue/1191	2021-02-01 12:51:00 -05:00
William Wernert	daebe90b6e	[fix] fix retry command handling ... * use eval "$cmd" to handle strings correctly * add-apt-repo doesn't need dpkg lock so don't use retry for those lines	2021-02-01 12:06:19 -05:00
William Wernert	44617fdddf	[fix] Run command being retried within quotes	2021-02-01 11:28:28 -05:00
William Wernert	36ce389202	Remove wait_for_apt, use common retry function to run apt commands	2021-02-01 10:55:14 -05:00
Mike Reeves	160d307f4a	Disable ML for features #2788	2021-01-30 20:00:41 -05:00
Mike Reeves	4212afe0c9	Add features option back	2021-01-30 19:57:18 -05:00
m0duspwnens	0ea504c16a	remove space	2021-01-29 17:32:48 -05:00
m0duspwnens	8ca15a6679	Merge remote-tracking branch 'remotes/origin/dev' into issue/1191	2021-01-29 16:54:26 -05:00
Mike Reeves	22e6e45667	Remove other changes	2021-01-29 16:14:14 -05:00
Mike Reeves	18f2c7b482	Raid Setup for Appliances	2021-01-29 16:03:18 -05:00
m0duspwnens	618b94b9b6	add newline	2021-01-29 15:31:05 -05:00