100 Commits

Author	SHA1	Message	Date
m0duspwnens	df14cbad44	fix calls to get_elastic_agent_vars	2024-09-04 17:43:49 -04:00
weslambert	dd09f5b153	Add so-soc-logs	2024-08-26 10:32:27 -04:00
weslambert	d7e3e134a5	Check Elasticsearch for template	2024-08-22 10:33:13 -04:00
weslambert	2a024039bf	Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm ... Create detections.alerts ILM policy with corresponding name	2024-08-21 14:50:10 -04:00
weslambert	88ea60df2a	Fix name	2024-08-21 14:38:57 -04:00
weslambert	c1b7232a88	Fix for detections-alerts	2024-08-21 14:38:29 -04:00
weslambert	4108e67178	Check for endpoint package	2024-08-21 14:22:28 -04:00
weslambert	5f74b1b730	Update column number because of changes to API	2024-08-15 08:26:56 -04:00
Doug Burks	ab63d5dbdb	Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API	2024-08-15 08:01:22 -04:00
weslambert	d833bd0d55	Elastic 8.14.3	2024-07-30 12:45:25 -04:00
weslambert	c60b14e2e7	Merge branch '2.4/dev' into foxtrot	2024-07-30 08:52:48 -04:00
Wes	c55fa6dc6a	Fix pattern for pipelines	2024-07-23 17:48:32 +00:00
weslambert	fe1824aedd	Revert "Elastic 8.14.2"	2024-07-15 11:28:59 -04:00
weslambert	0db0754ee5	Merge pull request #13316 from Security-Onion-Solutions/foxtrot ... Elastic 8.14.2	2024-07-10 08:53:03 -04:00
Wes	1b47d5c622	Changes for Elastic 8.14.1	2024-07-01 15:16:58 +00:00
m0duspwnens	81fcd68e9b	create and use redis:nodes and elasticsearch:nodes pillars	2024-06-20 16:42:11 -04:00
weslambert	deb140e38e	Exclude detections from template name matching	2024-05-21 13:38:52 -04:00
Doug Burks	26cb8d43e1	FIX: so-index-list typo #12988	2024-05-10 08:01:56 -04:00
Doug Burks	a1291e43c3	FIX: so-index-list typo #12988	2024-05-10 07:58:13 -04:00
weslambert	b424426298	Exclude suricata	2024-04-25 09:14:18 -04:00
weslambert	44afa55274	Fix comments about deletion	2024-04-24 17:41:37 -04:00
weslambert	ab832e4bb2	Include logstash-prefixed indices	2024-04-24 17:17:53 -04:00
weslambert	59a02635ed	Change index sorting	2024-04-24 15:18:49 -04:00
Doug Burks	406dda6051	Update so-elasticsearch-cluster-space-used	2024-04-18 11:48:15 -04:00
Doug Burks	229a989914	Update so-elasticsearch-cluster-space-total	2024-04-18 11:47:01 -04:00
Wes	4baf4657f6	Curator cleanup	2023-12-20 19:10:22 +00:00
Doug Burks	d49d13289e	Update so-elastic-clear	2023-12-12 16:37:06 -05:00
Wes	54c3167b10	Delete data streams when necessary	2023-12-12 05:25:50 +00:00
Wes	d203aec44a	Remove Curator	2023-12-08 19:37:06 +00:00
weslambert	02baa18502	Add metrics	2023-11-08 22:41:24 -05:00
weslambert	e39edab00d	Exclude osquery and display failed name	2023-11-08 20:55:08 -05:00
weslambert	acb6e84248	Don't load index template if component template doesn't exist	2023-11-08 20:34:08 -05:00
Jason Ertel	d256be3eb3	allow template loads to partially succeed only on the initial attempt	2023-11-08 10:32:11 -05:00
Wes	653fda124f	Check expected with retry	2023-11-08 13:02:17 +00:00
Wes	b46e86c39b	Extend index template loading to 60 attempts and a total of ~5 minutes	2023-11-08 02:29:09 +00:00
Wes	de9f9549af	Extend template loading to 24 attempts and a total of ~2 minutes	2023-11-07 23:55:03 +00:00
weslambert	749e22e4b9	Fix if statement	2023-11-07 17:29:38 -05:00
weslambert	69ec1987af	Fix if statement	2023-11-07 17:28:37 -05:00
Wes	570624da7e	Remove RETURN_CODE	2023-11-07 21:09:29 +00:00
Wes	7772657b4b	Remove RETURN_CODE	2023-11-07 21:06:35 +00:00
Wes	1676c84f9c	Use the retry function so-elasticsearch-query	2023-11-07 19:56:50 +00:00
Wes	0b4a246ddb	State file changes and retry logic	2023-11-07 16:44:42 +00:00
Wes	c30a0d5b5b	Better error handling and state file management	2023-11-06 14:29:01 +00:00
Wes	74eda68d84	Exit if unable to communicate with Elasticsearch	2023-11-06 13:16:35 +00:00
weslambert	51e7861757	Don't source so-elastic-fleet-common if not there	2023-11-02 16:41:34 -04:00
m0duspwnens	4d497022db	replace . with _x_ for soc ui compat	2023-08-10 09:52:18 -04:00
Wes	6a8737e9a2	Set delete for interactive	2023-07-19 12:21:47 +00:00
Wes	8a76975d8c	Use new agent scripts	2023-07-18 18:43:57 +00:00
Wes	0b5ee49873	Fix inverted logic for component template	2023-07-06 20:46:35 +00:00
Wes	910125f13a	Restructure logic	2023-07-06 17:49:06 +00:00