0b078c4804
give the elasticfleet state a few chances to complete successfully before exiting 1 causing so-setup to fail
2026-07-09 14:23:45 -05:00
2959dc9564
keep logs for all 3 attempts
2026-07-09 14:18:08 -05:00
8b0759866e
verify installers are generated
2026-07-09 14:15:22 -05:00
6fa0d327cb
cause so-setup to fail if there are issues setting up fleet
2026-07-09 14:14:58 -05:00
3394e9aab7
increase agent health timeout and add logging for elastic agent status output
2026-07-09 11:29:43 -05:00
3766f74102
Merge pull request #16052 from Security-Onion-Solutions/reyesj2-patch-2
...
elastic fleet server persistence
2026-07-08 16:40:45 -05:00
c04a30785f
make elastic agent state persistent to prevent re-enrollment during soup / reboots
2026-07-08 16:15:02 -05:00
ca4d22a5fe
Merge pull request #16050 from Security-Onion-Solutions/jertel/wip
...
restart soc after re-initing db
2026-07-08 16:07:13 -04:00
ea199aee55
Merge pull request #16049 from Security-Onion-Solutions/reyesj2-patch-1
...
add missing so-logs-soc annotation
2026-07-08 14:09:17 -05:00
5a57bbe4de
add missing so-logs-soc annotation
2026-07-08 14:03:31 -05:00
1f44e98681
restart soc after re-initing db
2026-07-08 14:34:27 -04:00
9a313d1966
Merge pull request #16045 from Security-Onion-Solutions/reyesj2/eahealth
...
verify elastic-agent reports healthy status before completing install…
2026-07-08 11:45:54 -05:00
85d7f6bebc
independently download so-elastic-agent installer
2026-07-08 08:19:15 -05:00
2a4a7307f7
uninstall agent after downloading new one and getting gridtoken
2026-07-08 07:51:13 -05:00
f8de176f4b
uninstall agent on final failed attempt
2026-07-08 07:47:47 -05:00
dffe0d3780
Merge pull request #16046 from Security-Onion-Solutions/jertel/wip
...
recollate databases
2026-07-08 07:05:37 -04:00
d131d167de
provide explanation text
2026-07-08 07:00:38 -04:00
8a8f2c4a33
change order to recollate first
2026-07-07 22:22:00 -04:00
7f6014096b
recollate db
2026-07-07 22:01:27 -04:00
70af3cec53
avoid using 'failure' until all loops are done so so-verify doesn't flag it
2026-07-07 16:48:10 -05:00
57b7d59387
verify elastic-agent reports healthy status before completing installation
2026-07-07 16:42:47 -05:00
ef83450107
recollate
2026-07-07 16:54:06 -04:00
032d792331
Merge pull request #16030 from Security-Onion-Solutions/feature/agentic
...
Feature/agentic
2026-07-07 14:37:52 -06:00
0cac761edc
Merge pull request #16041 from Security-Onion-Solutions/playbook-reponames
...
Add repo names
2026-07-07 13:53:16 +02:00
db91ce981d
Add repo names
2026-07-07 07:49:11 -04:00
bd8e5a63db
Merge pull request #16039 from Security-Onion-Solutions/TOoSmOotH-patch-1
...
Add cluster_health option to telegraf.conf
2026-07-06 17:29:04 -04:00
18212cad0d
Add cluster_health option to telegraf.conf
...
Enable cluster health monitoring in Telegraf configuration.
2026-07-06 17:27:37 -04:00
9975d36b4f
Merge pull request #16019 from Security-Onion-Solutions/feature/sigma-playbooks
...
support sigma playbooks
2026-07-06 13:17:54 +02:00
8e9e221196
Merge pull request #16035 from Security-Onion-Solutions/reyesj2/huntquery
...
update default hunt query
2026-07-02 14:50:59 -05:00
1fe7726aff
Changes from feedback
2026-07-02 14:58:48 -04:00
83cf1f0793
New Client Params for Tool Retries
2026-07-02 10:11:52 -06:00
07d6b2cfdd
Merge pull request #16033 from Security-Onion-Solutions/jertel/wip
...
avoid setup failure reason ambiguity
2026-07-02 09:20:48 -04:00
89afea876a
Merge branch '3/dev' into jertel/wip
2026-07-02 09:04:57 -04:00
1243a25bd3
avoid setup failure reason ambiguity
2026-07-02 08:59:52 -04:00
8675296393
More Agentic Fields
...
The big agentic switch, a specific maxDelegationDepth, and the agentMapping dict
2026-07-01 15:04:42 -06:00
23f04e2866
maxSubSessionTokens and maxDelegationDepth config settings
2026-07-01 15:02:21 -06:00
76f6947f36
Merge pull request #16029 from Security-Onion-Solutions/surirulereload
...
only reload suricata rules if all-rulesets.rules exists
2026-07-01 16:54:02 -04:00
92a55386c6
Merge pull request #16028 from Security-Onion-Solutions/reyesj2-patch-6
...
duplicate repo name in so-repo-sync
2026-07-01 15:50:54 -05:00
e7352eb841
duplicate repo name in so-repo-sync
2026-07-01 15:17:55 -05:00
795aa898a3
suricata: only reload rules once the ruleset file exists
...
On a fresh install the surirulesync file.recurse creates .gitkeep before
SOC has generated all-rulesets.rules. That change satisfied the
surirulereload onchanges requisite, so the reload ran with no ruleset
present, failed to stat the file, and reported the state (and install)
as failed.
Add an onlyif guard so the reload only runs when all-rulesets.rules
exists. A .gitkeep-only sync now leaves the state a clean success
(onlyif condition false); once SOC writes the ruleset, the reload fires
normally.
2026-07-01 15:12:54 -04:00
69d77382f1
suricata: timestamp each line of reload log output
...
Route the reload/verify output (ours plus so-common's retry/fail lines)
through a synchronous timestamping pipeline so every line in reload.log
is prefixed with a date/time, and preserve the real exit code via
PIPESTATUS.
2026-07-01 15:12:53 -04:00
dc9b4f3ce5
Merge pull request #16027 from Security-Onion-Solutions/reyesj2-patch-6
...
increase wait_for_so-kibana timeout to 10m
2026-07-01 13:48:10 -05:00
87b9276c79
increase wait_for_so-kibana timeout to 10m
2026-07-01 13:19:47 -05:00
99118f9bed
Merge pull request #16023 from Security-Onion-Solutions/reyesj2/uekairgap
...
update airgap soup to sync uek repo from iso and retain latest packag…
2026-07-01 13:14:55 -05:00
24b75b4a2b
typo
2026-07-01 12:50:23 -05:00
395bd627f1
Merge pull request #16024 from Security-Onion-Solutions/reyesj2/fixsearch
...
remove outdated eval script and associated salt utility state
2026-07-01 11:59:00 -05:00
868b217549
update default hunt query
2026-07-01 11:37:46 -05:00
c33db9d00f
remove outdated eval script and associated salt utility state
2026-07-01 11:12:39 -05:00
e88eb65a44
keep old packages for rollback ability
2026-07-01 10:29:05 -05:00
dc8c80633b
update airgap soup to sync uek repo from iso and retain latest packages only
2026-07-01 10:23:04 -05:00
reyesj2
Jason Ertel
Jason Ertel
coreyogburn
Josh Brower
Mike Reeves
Corey Ogburn
Matthew Wright
Josh Patterson