Commit Graph

62 Commits

Author SHA1 Message Date
m0duspwnens
81fcd68e9b create and use redis:nodes and elasticsearch:nodes pillars 2024-06-20 16:42:11 -04:00
m0duspwnens
fb9a0ab8b6 endif not fi in jinja 2023-10-17 17:33:53 -04:00
m0duspwnens
928fb23e96 only add node to pillar if returned ip from mine 2023-10-17 17:28:28 -04:00
Josh Brower
1baea3bcd5 Add Fleet to Logstash Nodes 2023-06-29 17:24:52 -04:00
Mike Reeves
a38495ce39 Fix pillar top for firewall 2023-05-01 10:40:36 -04:00
Josh Brower
af392681e3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into fleet-sa 2023-04-03 07:27:04 -04:00
Josh Brower
18a54b86f4 More fixes 2023-01-31 14:57:39 -05:00
m0duspwnens
e09a86dc30 2.4 searchnode es config 2023-01-31 10:54:40 -05:00
Josh Brower
a71cbcfc9b Pull in upstream changes 2023-01-27 07:53:53 -05:00
Josh Brower
29aa6dceed Add logstash 2023-01-27 07:49:21 -05:00
Wes
b3123f7895 Remove unnecessary Logstash pipelines from the pillar 2023-01-26 17:57:07 +00:00
Mike Reeves
2bd9dd80e2 Move In Day 2022-09-07 09:06:25 -04:00
Wes Lambert
5c90fce3a1 Add Kratos Logstash output to search pipeline for Logstash 2022-07-08 15:58:00 +00:00
m0duspwnens
d8abc0a195 if in dmz_nodes dont add to filebeta 2022-05-11 11:51:18 -04:00
m0duspwnens
a641346c02 prevent nodes with logstash:dmz:true from being added to logstash:nodes pillar 2022-05-10 17:28:19 -04:00
Wes Lambert
f613d8ad86 Add RITA Logstash config 2022-03-22 17:36:18 +00:00
m0duspwnens
797d769661 use actual hostname in logstash:nodes pillar 2022-02-03 10:36:18 -05:00
m0duspwnens
d9a384cc29 remove global:pipeline pillar call from logstash pipeline pillars 2021-12-15 09:30:15 -05:00
m0duspwnens
c490a3be36 move node_data pillar to logstash:nodes, set extra hosts for filebeat docker 2021-12-14 13:32:42 -05:00
m0duspwnens
96666ab307 add receiver node 2021-12-07 10:19:32 -05:00
m0duspwnens
392305e4ed add engame changes that were missing from merge somehow 2021-11-10 09:01:42 -05:00
m0duspwnens
c8fb504ee0 Revert "Merge remote-tracking branch 'remotes/origin/dev' into issue/3933"
This reverts commit 54eec92621, reversing
changes made to 7832e59629.
2021-10-13 15:22:46 -04:00
Wes Lambert
e1629d7ec4 Initial EG stuff 2021-10-13 17:13:07 +00:00
William Wernert
e41811fbd0 [fix] Typo 2021-07-13 15:14:13 -04:00
William Wernert
80525ee736 [wip] Add logscan pipeline 2021-07-08 12:29:50 -04:00
Mike Reeves
7fba904f75 Dynamix Pipelines take 1 2021-06-09 15:32:39 -04:00
Mike Reeves
33db9023eb Revert to SO taxonomy for zeek and suricata 2021-06-08 13:50:39 -04:00
Josh Brower
bba9913be1 Temp revert Fleet Live Query to Hunt 2021-03-17 08:25:25 -04:00
Josh Brower
548f67ca6f Initial support for Live Queries in Hunt 2021-03-04 18:21:13 -05:00
Mike Reeves
9708b02387 update pipeline 2020-08-08 18:32:36 -04:00
Mike Reeves
e7225349a6 Ability to toggle between redis and minio 2020-08-05 22:56:41 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
weslambert
7d432091e2 Remove LS syslog port binding 2020-07-29 08:35:07 -04:00
m0duspwnens
57bf23d83c move templates from logstash to elasticsearch 2020-07-14 16:07:46 -04:00
m0duspwnens
13af4cacb0 merge with dev and resolve conflicts 2020-07-10 16:27:10 -04:00
Mike Reeves
46d572fa8c Fix Filebeat spacing 2020-07-10 15:51:12 -04:00
Mike Reeves
5eb33d5ac7 Logstash Import and Template Assignment 2020-07-10 13:53:55 -04:00
m0duspwnens
24b8f81e38 merge with dev and resolve conflicts 2020-07-10 12:20:14 -04:00
Mike Reeves
bbef7955b2 Update eval.sls 2020-07-10 11:36:46 -04:00
Mike Reeves
3706aa76d8 Add jinja extension 2020-07-10 10:35:31 -04:00
Mike Reeves
9a7035326d Update Logstash pillar 2020-07-09 17:09:20 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Josh Brower
4e4eeedb41 Initial support - external beats 2020-06-04 22:41:35 -04:00
Wes Lambert
8cac30728b update Logstash config 2020-06-02 17:36:36 +00:00
Mike Reeves
e270b18d94 Remove special character in logstash pillar 2020-04-02 14:25:58 -04:00
weslambert
edbe512d82 Bro to Zeek 2020-04-01 15:18:30 -04:00
Wes Lambert
22e7777d67 update search sls 2020-04-01 19:12:07 +00:00
weslambert
9f58081ce8 Typo 2020-04-01 14:57:47 -04:00
weslambert
d0ad7e7ef9 Update config for search pipeline 2020-04-01 14:57:32 -04:00
Wes Lambert
81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00