79d9b6e0a4
restart salt minion before failing if not ready
2026-02-26 12:05:21 -05:00
dfed3681df
Merge pull request #15531 from Security-Onion-Solutions/idstools-cleanup
...
Cleanup idstools
2026-02-26 10:21:18 -05:00
6b82712474
Merge pull request #15532 from Security-Onion-Solutions/jertel/wip
...
exclude transient ghcr.io network errors since it retries during setup
2026-02-26 10:17:44 -05:00
039e8db85f
exclude transient ghcr.io network errors since it retries during setup
2026-02-26 10:14:07 -05:00
55e984df4c
readonly deprecated setting
2026-02-26 10:12:23 -05:00
5e7b0cfe0e
Cleanup idstools
2026-02-26 09:05:54 -05:00
ee4a2f00be
Merge pull request #15526 from Security-Onion-Solutions/jertel/wip
...
do not allow auth redirection to login page or home page; that serves…
2026-02-25 18:14:25 -05:00
c4b6cef8ee
Merge pull request #15525 from Security-Onion-Solutions/reyesj2/agentstatus
2026-02-25 17:02:11 -06:00
c1c568e94d
do not allow auth redirection to login page or home page; that serves no purpose
2026-02-25 17:58:35 -05:00
12b3081a62
fix agentstatus script
2026-02-25 16:39:33 -06:00
91ea0e6952
Merge pull request #15523 from Security-Onion-Solutions/reyesj2-patch-1
...
fix suricata filestream dataset
2026-02-24 15:02:57 -06:00
0bcfec3f56
Merge pull request #15524 from Security-Onion-Solutions/reyesj2/elastic9-review
...
fix field conflicts
2026-02-24 15:02:37 -06:00
4d5ace2a89
add file.bytes.missing field mapping
2026-02-24 14:32:01 -06:00
f4be73fdde
re-add event-mappings to kratos index for event.ingested mapping
2026-02-24 14:23:08 -06:00
742649a337
rename kratos file to file.path
2026-02-24 14:21:28 -06:00
32a26559dd
add dns.query.type and dns.query.type_name field mappings
2026-02-24 14:00:06 -06:00
7e5daf7f7f
fix suricata filestream dataset
2026-02-24 12:46:20 -06:00
2552a5c17d
Merge pull request #15522 from Security-Onion-Solutions/TOoSmOotH-patch-4
...
Rename model ID from 'sonnet-4.5' to 'sonnet'
2026-02-24 10:11:43 -05:00
fa479c4b89
Merge pull request #15517 from Security-Onion-Solutions/souppcap
...
Add Support for upgrading to 3.0
2026-02-24 10:11:24 -05:00
479e3e0afa
Update display name for Claude Sonnet model
2026-02-24 10:10:49 -05:00
be35b59b8c
Update echo messages for PCAP engine clarity
2026-02-24 10:04:26 -05:00
c52d3269d6
Rename model ID from 'sonnet-4.5' to 'sonnet'
2026-02-24 09:45:46 -05:00
3583b92836
Merge pull request #15519 from Security-Onion-Solutions/bravo
...
fix soup failure if salt-relay isn't running
2026-02-23 15:17:49 -05:00
2375061cfa
so-yaml.py tell which key not found
2026-02-23 13:19:03 -05:00
1a9a087af2
redirect not found if key isn't found
2026-02-23 13:17:38 -05:00
bf16de7bfd
fix duplicate log lines in soup log
2026-02-23 12:07:04 -05:00
863c7abc8b
fix soup failure if salt-relay isn't running
2026-02-23 11:36:20 -05:00
7170289a5e
Continue upgrade after pcapengine is changed to SURICATA
...
Instead of exiting and requiring the user to rerun the script after
changing pcapengine to SURICATA, let the script continue to the
version check and upgrade.
2026-02-23 11:35:32 -05:00
ca040044bb
Use so-yaml to update pcapengine pillar and fix file path
...
Replace fragile sed with so-yaml.py replace for proper YAML handling.
Also correct the pillar file path from soc_soc.sls to soc_global.sls.
2026-02-23 11:16:30 -05:00
f17e2961ed
Add PCAP orphan warning and require SURICATA before upgrade
...
- Warn users that undeleted Stenographer PCAP data will be inaccessible
and never automatically cleaned up if they switch to SURICATA without
deleting it first
- Require pcapengine to be set to SURICATA before allowing upgrade,
with clear messaging when the user declines to change it
2026-02-23 11:05:30 -05:00
bbc7668786
Add version check, PCAP cleanup prompts, and SOC config references to soupto3
...
- Skip upgrade if already running Security Onion 3.x.x
- Add interactive prompts to delete Stenographer PCAP data (with double confirmation) and change pcapengine to SURICATA
- Direct users to SOC Configuration UI instead of editing pillar files directly
- Consolidate TRANSITION and STENO cases to reduce repeated code
2026-02-23 10:49:54 -05:00
1888f9e757
Soup to 3
2026-02-23 10:07:16 -05:00
5822d1c974
Merge pull request #15513 from Security-Onion-Solutions/bravo
...
fix consecutive comments
2026-02-20 16:12:12 -05:00
b3139c5008
fix consecutive comments
2026-02-20 16:07:59 -05:00
0a64bb0a87
Merge pull request #15511 from Security-Onion-Solutions/reyesj2/analyzdepupg
...
upgrade analyzer deps
2026-02-20 13:28:32 -06:00
cf6b5aeceb
Merge pull request #15503 from Security-Onion-Solutions/reyesj2/mngdanno
...
migrate managed_integrations pillar
2026-02-20 13:28:23 -06:00
bcb850d98a
analyzer typo
2026-02-20 12:34:28 -06:00
f0139c04f0
Merge pull request #15510 from Security-Onion-Solutions/bravo
...
upgrade docker
2026-02-20 12:32:10 -05:00
78ae6cd84c
upgrade docker
2026-02-20 12:29:23 -05:00
b7e0b2faa3
Merge pull request #15505 from Security-Onion-Solutions/mwright/gemini-tests
...
New so-yaml.py Functions for Gemini Cypress Test Support
2026-02-20 10:06:15 -05:00
bfd1cf2d9b
Merge pull request #15509 from Security-Onion-Solutions/bravo
...
upgrade docker
2026-02-20 08:31:38 -05:00
8cc8a63a4e
upgrade docker
2026-02-20 07:59:07 -05:00
b3a0eb0761
Merge pull request #15507 from Security-Onion-Solutions/cogburn/update-assistant-annot
...
healthTimeoutSeconds should be an int
2026-02-19 15:58:05 -07:00
38e45056f2
healthTimeoutSeconds should be an int
2026-02-19 15:56:28 -07:00
39bad077ae
Merge pull request #15506 from Security-Onion-Solutions/bravo
...
upgrade docker
2026-02-19 17:17:43 -05:00
b349d27e8c
upgrade docker
2026-02-19 17:12:39 -05:00
90eee49ab6
whitespace issue pt2
2026-02-19 16:35:35 -05:00
f025886b31
whitespace issue
2026-02-19 16:33:40 -05:00
7fa01f5fd5
added new funcs to so-yaml.py to support gemini tests
2026-02-19 16:20:44 -05:00
75e1f74244
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/analyzdepupg
2026-02-19 15:10:54 -06:00
Josh Patterson
Josh Brower
Jason Ertel
Jason Ertel
Jorge Reyes
Mike Reeves
Mike Reeves
Matthew Wright
coreyogburn
Corey Ogburn
Matthew Wright