6208 Commits

Author	SHA1	Message	Date
m0duspwnens	a31f034f2e	remove receiver add node for cacerts and tls-ca-bundle for logstash bind	2021-12-14 15:02:59 -05:00
m0duspwnens	6962e3f9b3	fix logstash certs mapped into container	2021-12-14 14:52:15 -05:00
m0duspwnens	c490a3be36	move node_data pillar to logstash:nodes, set extra hosts for filebeat docker	2021-12-14 13:32:42 -05:00
Mike Reeves	30344ba0ef	Fix conflicts	2021-12-14 10:55:19 -05:00
m0duspwnens	6518691c55	sort the items	2021-12-13 18:16:25 -05:00
m0duspwnens	067e79894f	fix loop for node_data	2021-12-13 16:26:38 -05:00
m0duspwnens	6de2f5bd03	fix node_data	2021-12-13 15:55:09 -05:00
m0duspwnens	8d0872bce5	create node_data pillar from mine data, use node_data pillar for filebeat config	2021-12-13 15:48:30 -05:00
Jason Ertel	c94d5fa9dc	Strip JndiLookup.class from log4j-core jars, to match Elastic's mitigation approach	2021-12-13 09:27:13 -05:00
Jason Ertel	8365b5f140	Strip JndiLookup.class from log4j-core jars, to match Elastic's mitigation approach	2021-12-13 09:02:41 -05:00
m0duspwnens	86f67198bf	loadbalance filebeat if across managers and receivers	2021-12-10 17:43:06 -05:00
m0duspwnens	fe7247f876	update fw for receiver and add mine_functions for ip_addr	2021-12-10 15:28:40 -05:00
Mike Reeves	dcd56de890	Update log4j2.properties	2021-12-10 14:23:38 -05:00
Mike Reeves	3d7b963912	Update log4j2.properties	2021-12-10 14:16:16 -05:00
Mike Reeves	09253b637e	Create jvm.options	2021-12-10 14:12:43 -05:00
Mike Reeves	c81ce48bff	Update log4j2.properties	2021-12-10 14:10:35 -05:00
Mike Reeves	73ec595baa	Update init.sls	2021-12-10 14:10:05 -05:00
Mike Reeves	45346b6318	Update log4j2.properties	2021-12-10 12:01:39 -05:00
Mike Reeves	e48de18480	Update init.sls	2021-12-10 12:00:12 -05:00
Mike Reeves	66c8cc6e86	Update init.sls	2021-12-10 11:59:12 -05:00
Mike Reeves	8dcb64d87c	Update init.sls	2021-12-10 11:56:33 -05:00
Mike Reeves	4561e13871	Update log4j2.properties	2021-12-10 10:19:58 -05:00
Mike Reeves	ea26e402c8	Update log4j2.properties	2021-12-10 10:17:49 -05:00
Jason Ertel	83d86aebb1	Perform full email match	2021-12-09 15:04:00 -05:00
m0duspwnens	d94496bb90	remove minio_key and add missing endif	2021-12-09 13:24:20 -05:00
m0duspwnens	c2a952796c	Merge remote-tracking branch 'remotes/origin/sans' into issue/6469	2021-12-09 13:13:18 -05:00
Mike Reeves	b92cbb01b3	SSL modifications	2021-12-09 13:13:01 -05:00
m0duspwnens	5b70d5510f	Merge remote-tracking branch 'remotes/origin/sans' into issue/6469	2021-12-09 13:12:00 -05:00
Jason Ertel	2761662eb9	Add status presets	2021-12-09 13:09:56 -05:00
Mike Reeves	a7f0d81555	SSL modifications	2021-12-09 13:07:00 -05:00
Josh Brower	656ea974dc	Use id for doc id if it exists	2021-12-09 09:16:58 -05:00
Jason Ertel	a9b7b9ee92	Jinjafy case params	2021-12-08 17:41:48 -05:00
m0duspwnens	ecc8594d44	prevent so-receiver from getting extra keys/certs	2021-12-08 13:32:56 -05:00
m0duspwnens	59464af10c	filebeat certs for logstash on so-receiver	2021-12-08 09:41:17 -05:00
m0duspwnens	1ef63f3a23	ssl things for so-receiver	2021-12-08 09:08:46 -05:00
m0duspwnens	8c95d0f36b	set ip for wazuh-register-agent and dont apply nginx in setup for receiver	2021-12-07 16:50:41 -05:00
m0duspwnens	429b9cab2f	set ip for ossec.conf	2021-12-07 16:22:07 -05:00
m0duspwnens	f8da5c7fe9	start of fw rules for receiver	2021-12-07 15:59:11 -05:00
m0duspwnens	06010bd157	add so-receiver to allowed_states	2021-12-07 13:34:06 -05:00
Jason Ertel	b73eb76c94	Make case module dynamic	2021-12-07 11:51:02 -05:00
m0duspwnens	7549e34881	Merge remote-tracking branch 'remotes/origin/dev' into issue/6469	2021-12-07 10:57:12 -05:00
Jason Ertel	702d95c63a	Merge branch 'master' into merge-202112071527	2021-12-07 10:28:00 -05:00
m0duspwnens	96666ab307	add receiver node	2021-12-07 10:19:32 -05:00
Wes Lambert	0571612ea1	Add initial EG dashes	2021-12-03 22:38:30 +00:00
Mike Reeves	f82d204c0e	Update soup	2021-12-03 15:20:33 -05:00
Mike Reeves	780daf8aa7	Apply hotfix to all 2.3.90 installs	2021-12-03 15:15:45 -05:00
m0duspwnens	c6773a0bbc	move "Preparing soup" to main so shows in soup.log	2021-12-03 10:26:22 -05:00
m0duspwnens	ff2d2c7c04	export LC_CTYPE="en_US.UTF-8" - https://github.com/Security-Onion-Solutions/securityonion/discussions/6431	2021-12-02 16:39:32 -05:00
Mike Reeves	f5761c73a5	Fix for the clustername used in wrong context	2021-12-02 15:30:35 -05:00
m0duspwnens	8d667795a7	only add soc:es_index_patterns to pillar if not already present	2021-12-02 10:28:17 -05:00