Commit Graph

278 Commits

Author SHA1 Message Date
m0duspwnens
1440c72559 changes for desktop referencing Rocky/CentOS to OEL 2023-08-09 08:06:51 -04:00
Mike Reeves
2875a7a2e5 Sensor NIC offload 2023-08-01 09:48:44 -04:00
m0duspwnens
41a4321b03 configure logrotate through soc 2023-06-30 11:26:55 -04:00
Mike Reeves
6adef20a06 Fix the rest of the analyst entries 2023-06-26 16:26:55 -04:00
Josh Brower
d0d7ab57ca Add Elastic Agent container for Heavy Nodes 2023-06-22 16:02:17 -04:00
m0duspwnens
4e4034e054 cleanup strelka in top and allowed_states 2023-05-10 15:59:10 -04:00
m0duspwnens
02e1a29f0c configure redis in ui 2023-05-10 11:54:21 -04:00
m0duspwnens
a0ce46e702 enable/disable logstash in ui 2023-05-10 11:16:03 -04:00
m0duspwnens
ec7bcd9b0c enabled/disable kibana in ui 2023-05-09 16:46:48 -04:00
m0duspwnens
7bd9a84aa1 changes to top and allow_states for enable/disable elasticsearch in ui 2023-05-09 10:01:30 -04:00
m0duspwnens
9049f9cf03 enabled/disable elastalert via web ui 2023-05-08 15:56:26 -04:00
m0duspwnens
ef18cb3704 top and allow_states changes for playbook 2023-05-08 14:12:46 -04:00
m0duspwnens
5d50dbb69e enabled/disable zeek 2023-05-08 10:12:32 -04:00
Josh Brower
b17b68034e Reenable Elastic Package Registry - all managers 2023-05-04 12:19:45 -04:00
Josh Brower
b4b84038ed Merge pull request #10277 from Security-Onion-Solutions/2.4/package-registry
Reenable Elastic Package Registry
2023-05-03 12:57:21 -04:00
Josh Brower
17dd21703d Reenable Elastic Package Registry 2023-05-03 12:08:46 -04:00
m0duspwnens
3fdcb92dfe dont apply firewall.soc state anymore for manager highstate 2023-04-28 15:33:54 -04:00
Josh Brower
4c4b873eca Add integrations and cleanup 2023-04-19 09:04:33 -04:00
Josh Brower
c2d4e870c8 Fixup Elastic Fleet 2023-04-03 16:50:34 -04:00
Josh Brower
af392681e3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into fleet-sa 2023-04-03 07:27:04 -04:00
m0duspwnens
d886265211 add elasticfleet state to top for eval node 2023-03-28 09:01:41 -04:00
Josh Patterson
c8e93f0388 Update top.sls 2023-03-22 17:22:21 -04:00
Mike Reeves
4944365341 Change the salt dir for elastic fleet 2023-03-17 11:02:02 -04:00
m0duspwnens
61879a8d33 merge with dev and resolve conflicts in salt/top 2023-03-08 09:04:09 -05:00
Josh Brower
fd2312a2ac Remove EA install from manager highstates 2023-03-07 15:13:35 -05:00
m0duspwnens
14aa9ac5c9 apply elastic-fleet state to managers 2023-03-07 10:35:49 -05:00
Mike Reeves
2091806f1f Merge pull request #9864 from Security-Onion-Solutions/setuperrors
Fix some errors in setup
2023-03-01 09:48:20 -05:00
Josh Brower
96467f0bd8 Merge pull request #9865 from Security-Onion-Solutions/2.4/fleet-esoutput
Move Output to ES
2023-02-28 15:20:46 -05:00
Mike Reeves
aa7b05d639 small cleanup 2023-02-27 14:12:26 -05:00
Josh Brower
f7176f9989 Move Output to ES 2023-02-27 09:58:43 -05:00
m0duspwnens
fa5b9799f5 add firewall.soc to top for managers 2023-02-24 15:26:39 -05:00
Mike Reeves
76011c96d6 fix conflict 2023-02-22 10:20:14 -05:00
Mike Reeves
c3784fe548 remove grafana 2023-02-22 10:09:52 -05:00
m0duspwnens
56ccf5c504 remove podman 2023-02-22 09:13:16 -05:00
Josh Brower
b62cc32b1a Initial support for IDH 2023-02-21 11:52:37 -05:00
m0duspwnens
653062b7c9 run podman state early 2023-02-21 09:46:52 -05:00
m0duspwnens
160ed46d96 podman and remove filebeat 2023-02-17 14:59:39 -05:00
Mike Reeves
c6919a09da replace centos 2023-02-17 11:26:11 -05:00
Jason Ertel
59b1af15db correct top order for import 2023-02-16 13:49:19 -05:00
Jason Ertel
ea0c3db8e1 upgrade influxdb 2023-02-08 13:23:45 -05:00
Josh Brower
a71cbcfc9b Pull in upstream changes 2023-01-27 07:53:53 -05:00
Josh Brower
29aa6dceed Add logstash 2023-01-27 07:49:21 -05:00
Wes
6a803dfe35 Add Elastic Fleet to top file configuration for Import Mode 2023-01-26 16:01:03 +00:00
weslambert
6ee66a34bc Revert "Elastic Agent and Fleet - Import Mode" 2023-01-25 17:12:03 -05:00
Wes
1414b75e01 Allow 'elastic-fleet' state to be applied for Import Mode 2023-01-25 14:07:25 +00:00
Josh Brower
81ee333b07 Initial support - Elastic Fleet Node 2023-01-24 13:36:30 -05:00
Josh Brower
e83e54936e Temp disable Elastic Registry Repo 2023-01-19 07:25:25 -05:00
weslambert
b3e0183e39 Remove pipeline.load from top.sls so that Filebeat module loading is not attempted 2023-01-11 12:19:06 -05:00
Wes
52b620b137 Add additional conditional logic for Filebeat and disable Filebeat 2023-01-11 14:10:11 +00:00
Doug Burks
75e16963c8 add influxdb and telegraf to import mode 2022-12-22 09:47:47 -05:00