m0duspwnens
|
9049f9cf03
|
enabled/disable elastalert via web ui
|
2023-05-08 15:56:26 -04:00 |
|
Mike Reeves
|
7595072e85
|
Fix some files
|
2023-05-02 12:15:05 -04:00 |
|
Mike Reeves
|
148b0b1c4c
|
use hostnames please
|
2023-02-23 11:11:29 -05:00 |
|
Mike Reeves
|
95f254dc63
|
Change elastalert ip
|
2023-02-23 09:37:20 -05:00 |
|
Mike Reeves
|
dc2fed5b04
|
Change elastalert ip
|
2023-02-23 09:34:16 -05:00 |
|
m0duspwnens
|
a37f0fd0c0
|
rename sosbridge to sobridge
|
2023-02-03 10:07:07 -05:00 |
|
m0duspwnens
|
ac157432de
|
include docker
|
2023-01-09 14:58:36 -05:00 |
|
m0duspwnens
|
ec5c565cec
|
put elastalert on sosbridge
|
2023-01-09 14:49:33 -05:00 |
|
m0duspwnens
|
b526532ab6
|
use global vars in states
|
2022-10-11 11:57:15 -04:00 |
|
Mike Reeves
|
037d5d1c46
|
Fix yaml for idh,es,kib,esalert
|
2022-09-09 15:55:51 -04:00 |
|
Mike Reeves
|
2bd9dd80e2
|
Move In Day
|
2022-09-07 09:06:25 -04:00 |
|
m0duspwnens
|
7d7cf42d9a
|
use onlyif requisite instead
|
2022-07-13 15:21:34 -04:00 |
|
m0duspwnens
|
086cf3996d
|
do not start elastalert if elasticsearch is not v8
|
2022-07-13 11:21:27 -04:00 |
|
Jason Ertel
|
eefcc929c2
|
Update copyright pattern to match other repos
|
2022-01-24 10:09:23 -05:00 |
|
m0duspwnens
|
7ebba1f325
|
use show_changes: False to prevent es pw from being shown when running the state
|
2022-01-19 12:11:38 -05:00 |
|
m0duspwnens
|
f93c6146f5
|
docker binds requires
|
2021-10-21 15:24:55 -04:00 |
|
Jason Ertel
|
d0592c4293
|
Update ElastAlert to use ElastAlert 2
|
2021-09-28 00:51:29 -04:00 |
|
Jason Ertel
|
059b016c62
|
Fix require statement
|
2021-06-16 21:48:31 -04:00 |
|
Jason Ertel
|
2d34208269
|
Elastic auth: Fun with Salt
|
2021-06-16 17:52:22 -04:00 |
|
Jason Ertel
|
dd14235e31
|
Accept either 200 or 401 instead of wasting 3 minutes waiting for this to timeout
|
2021-06-16 11:39:21 -04:00 |
|
Jason Ertel
|
dd8eb29a18
|
Continue merge of ECS into Elastic Auth
|
2021-06-15 09:11:58 -04:00 |
|
Mike Reeves
|
e0538417f1
|
fix http.wait
|
2021-03-03 14:06:35 -05:00 |
|
Mike Reeves
|
bfd05a8cfc
|
Change to https for elastic connections
|
2021-03-02 11:32:29 -05:00 |
|
m0duspwnens
|
f50a89a0cf
|
watch elastalert config and restart docker if chagnes
|
2021-01-29 15:28:59 -05:00 |
|
m0duspwnens
|
b7aef32eeb
|
fix missing }
|
2021-01-27 15:50:23 -05:00 |
|
m0duspwnens
|
8df9e020ac
|
pillarize elastalert https://github.com/Security-Onion-Solutions/securityonion/issues/1191
|
2021-01-27 15:35:29 -05:00 |
|
m0duspwnens
|
b693373d8d
|
change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679
|
2021-01-20 15:09:53 -05:00 |
|
m0duspwnens
|
1fca5e65df
|
redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681
|
2020-11-10 15:31:47 -05:00 |
|
weslambert
|
887937a75d
|
Remove rule sync, since we don't have any rules to sync
|
2020-09-30 18:35:35 -04:00 |
|
m0duspwnens
|
09cc8ae1fb
|
fail the state if it isnt in top
|
2020-09-09 16:48:50 -04:00 |
|
m0duspwnens
|
a229ae82ce
|
only allow state to run if it is in top for the node
|
2020-09-02 16:15:52 -04:00 |
|
weslambert
|
5d920885e0
|
Add manager to hosts file
|
2020-09-02 07:43:55 -04:00 |
|
Wes Lambert
|
9abbda8e04
|
Wait for Elasticsearch indices to be queryable before starting Elastalert container
|
2020-08-31 13:54:49 +00:00 |
|
Mike Reeves
|
24ed92c9dc
|
minio and change to global
|
2020-08-04 15:54:03 -04:00 |
|
Jason Ertel
|
8f66a27f07
|
Refactor image repository to a single variable
|
2020-07-13 18:26:43 -04:00 |
|
m0duspwnens
|
5ca3ecf4bd
|
fix reference to master grain
|
2020-07-09 15:42:39 -04:00 |
|
m0duspwnens
|
3cf31e2460
|
https://github.com/Security-Onion-Solutions/securityonion/issues/404
|
2020-07-09 11:27:06 -04:00 |
|
Mike Reeves
|
c59096d9bd
|
rename node pillar to elasticsearch
|
2020-07-07 10:42:12 -04:00 |
|
m0duspwnens
|
74290eca2a
|
change = to in - https://github.com/Security-Onion-Solutions/securityonion-saltstack.git
|
2020-05-15 11:20:06 -04:00 |
|
m0duspwnens
|
509188092c
|
adding so-standalone state logic, add zeek pillar to so-standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/140
|
2020-05-15 10:02:25 -04:00 |
|
Josh Brower
|
6e4ee26a58
|
Elastalert --> TheHive fixes
|
2020-05-13 16:34:35 -04:00 |
|
Jason Ertel
|
db51ab9d45
|
Adjust elastalert salt setup to match new so-elastalert image
|
2020-05-13 12:14:18 -04:00 |
|
m0duspwnens
|
766b56a944
|
update dockers to 1.2.2
|
2020-04-23 10:11:26 -04:00 |
|
Mike Reeves
|
d9e27a5444
|
Update Versions
|
2020-04-15 15:37:59 -04:00 |
|
Wes Lambert
|
b995b09d52
|
Update version in all state files
|
2020-01-28 14:59:53 +00:00 |
|
Mike Reeves
|
e038a8b731
|
Merge branch 'dev' into feature/issue124
|
2020-01-21 16:48:26 -05:00 |
|
m0duspwnens
|
a39edad3f6
|
changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124
|
2020-01-21 16:39:42 -05:00 |
|
Mike Reeves
|
ae55b59048
|
Switch to using images in registry
|
2020-01-14 10:11:26 -05:00 |
|
Mike Reeves
|
ca4cd782a1
|
Docker URL Fix - Issue #68
|
2019-10-16 10:39:18 -04:00 |
|
Wes Lambert
|
5419bd6f08
|
update config for Elastalert
|
2019-09-23 14:43:14 +00:00 |
|