Commit Graph

5773 Commits

Author SHA1 Message Date
Jason Ertel
0915ae30e4 Add timestamps to so-yara-update output 2020-12-11 10:08:10 -05:00
Jason Ertel
14f28e38be Ensure so-yara-updata script is logging to a file during cron job execution 2020-12-11 10:04:43 -05:00
William Wernert
25f2075e22 [fix] Revert bad change to whiptail_basic_zeek 2020-12-10 15:01:10 -05:00
Mike Reeves
cd6a945a24 Merge pull request #2298 from Security-Onion-Solutions/escluster
Traditional ES Clustering Support
2020-12-10 12:07:17 -05:00
TOoSmOotH
42833b2086 Make non clustered node attributes 2020-12-10 11:14:32 -05:00
TOoSmOotH
d9d7f49b96 Adjust elasticsearch.yml 2020-12-10 11:09:38 -05:00
weslambert
24fce27e62 Merge pull request #2297 from Security-Onion-Solutions/feature/idstools_arg
Add ability to supply an arg, for example overriding 15 min limit
2020-12-10 09:31:50 -05:00
Wes Lambert
45faa7fda4 Add ability to supply an arg, for example overriding 15 min limit 2020-12-10 14:30:29 +00:00
weslambert
c2cf2c4987 Merge pull request #2296 from Security-Onion-Solutions/fix/suricata_ftp_data
Add initial suricata.ftp_data pipeline
2020-12-10 09:17:01 -05:00
TOoSmOotH
379f1d98d8 fix addtotab 2020-12-10 09:15:17 -05:00
Wes Lambert
f689722559 Add initial suricata.ftp_data pipeline 2020-12-10 14:14:50 +00:00
weslambert
d09daef094 Merge pull request #2288 from Security-Onion-Solutions/fix/strelka_rules
Expand STRELKARULES
2020-12-09 17:05:44 -05:00
weslambert
0b2e2739bd Expand STRELKARULES 2020-12-09 17:05:11 -05:00
TOoSmOotH
af15f0eb38 remove ml node.role 2020-12-09 16:23:38 -05:00
TOoSmOotH
101ddd18a5 Fix print statments 2020-12-09 16:08:09 -05:00
Mike Reeves
3a903501fd Merge pull request #2286 from Security-Onion-Solutions/newescluster
Newescluster
2020-12-09 16:01:46 -05:00
Mike Reeves
30e69bf7b2 Merge branch 'escluster' into newescluster 2020-12-09 15:23:49 -05:00
TOoSmOotH
0a48f7d5dc Simplify logic 2020-12-09 15:22:09 -05:00
TOoSmOotH
e983322a18 Fix elastic if statement 2020-12-09 11:31:22 -05:00
TOoSmOotH
6ceecbd524 Fixing some elasticsearch logic 2020-12-09 09:42:03 -05:00
TOoSmOotH
d6fa739c60 Adding queue=True 2020-12-08 11:17:47 -05:00
Josh Brower
f34a10a986 Merge pull request #2259 from Security-Onion-Solutions/feature/playbook-updates2
Playbook db updates
2020-12-08 10:36:42 -05:00
Josh Brower
35be785f7a Playbook db updates 2020-12-08 10:35:50 -05:00
Jason Ertel
5d955bcdb7 Enable new SoStatus module in SOC for managing grid status 2020-12-08 09:22:18 -05:00
Josh Brower
5f756549b1 Merge pull request #2254 from Security-Onion-Solutions/feature/playbook-updates2
Initial support - Playbook Overrides
2020-12-07 22:30:50 -05:00
Josh Brower
8915e49288 Initial support - Playbook Overrides 2020-12-07 22:28:58 -05:00
Josh Patterson
2d9c6a42bf Merge pull request #2249 from Security-Onion-Solutions/issue/2188
Issue/2188
2020-12-07 16:52:34 -05:00
Josh Brower
35ea6c36d2 Merge pull request #2247 from Security-Onion-Solutions/feature/so-suricata-ruletest
so-suricata-testrule initial commit
2020-12-07 15:12:20 -05:00
William Wernert
64dc9f8d4e [fix] Only list ipv4 addresses when checking mysql 2020-12-07 14:40:32 -05:00
Mike Reeves
8ea088c3fc Restart Elastic on addition of node. 2020-12-07 14:09:41 -05:00
m0duspwnens
b5e0b21400 Merge remote-tracking branch 'remotes/origin/dev' into issue/2188 2020-12-07 11:52:09 -05:00
m0duspwnens
19d27c7d68 remove docker-ce-cli from common state 2020-12-07 11:50:47 -05:00
William Wernert
38324c226e [fix] Don't let grep output message on file not found 2020-12-07 10:58:58 -05:00
m0duspwnens
4fe2de2637 upgrade docker https://github.com/Security-Onion-Solutions/securityonion/issues/2188 2020-12-07 10:47:20 -05:00
William Wernert
3136c66780 [fix] Bring back network setup before setting MAINIP var 2020-12-07 08:50:53 -05:00
Josh Brower
134d9bc89a so-suricata-testrule initial commit 2020-12-06 17:08:11 -05:00
William Wernert
d724fe7357 Merge pull request #2201 from Security-Onion-Solutions/bugfix/reinstall
Bugfix/reinstall
2020-12-04 09:38:46 -05:00
William Wernert
fca50660a2 [fix] Trap argument off by one 2020-12-04 09:33:28 -05:00
William Wernert
3273a63662 [fix] kill old restart pid and assign new pid for start 2020-12-03 15:38:26 -05:00
William Wernert
660c768f8f Only kill+start on final loop and increase time between status checks 2020-12-03 15:38:26 -05:00
William Wernert
ebade0a5a6 [fix] Also kill+start while trying to restart service initially 2020-12-03 15:38:26 -05:00
William Wernert
ac85cbc3f1 [fix] Move set_redirect out of sub-shell 2020-12-03 15:38:26 -05:00
William Wernert
b5bfad07dc [fix] kill/start after if statement 2020-12-03 15:38:26 -05:00
William Wernert
3049718660 [fix] Kill + start salt-minion if it isn't responding 2020-12-03 15:38:25 -05:00
William Wernert
80ce8b5e41 [refactor] Run all changes inside whiptail progress, use grep -q 2020-12-03 15:38:25 -05:00
William Wernert
2c208ec943 [fix] kill -> stop, add indent to service check, revert incorrect logic 2020-12-03 15:38:25 -05:00
William Wernert
76fff28dfa [fix] Correct logic for service check + bash trap 2020-12-03 15:38:25 -05:00
William Wernert
af8295a651 [reafactor] systemctl stop -> kill 2020-12-03 15:38:25 -05:00
Jason Ertel
967111decc Add node address to sensoroni pillar 2020-12-03 11:24:45 -05:00
Mike Reeves
94253e92a6 Adjust the elasticsearch config 2020-12-03 10:38:18 -05:00