219 Commits

Author	SHA1	Message	Date
m0duspwnens	e3f9b5297a	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode	2023-03-02 16:58:56 -05:00
m0duspwnens	e6167dc34a	heavynode changes	2023-03-02 15:09:59 -05:00
Josh Brower	96467f0bd8	Merge pull request #9865 from Security-Onion-Solutions/2.4/fleet-esoutput ... Move Output to ES	2023-02-28 15:20:46 -05:00
m0duspwnens	44ed48033c	move requirement	2023-02-27 13:04:23 -05:00
m0duspwnens	068d383442	change to service.running	2023-02-27 12:44:46 -05:00
m0duspwnens	b4015ac73e	add sensor to node_containers	2023-02-27 10:05:08 -05:00
Josh Brower	f7176f9989	Move Output to ES	2023-02-27 09:58:43 -05:00
m0duspwnens	d12ea041bf	capitalize	2023-02-24 16:20:16 -05:00
m0duspwnens	6b486d9604	move to default	2023-02-24 15:55:27 -05:00
m0duspwnens	d502d95dba	changes for soc firewall	2023-02-24 15:24:02 -05:00
m0duspwnens	29c68c1273	fix bracket, add output to template	2023-02-24 14:32:35 -05:00
m0duspwnens	3e2e68fbd0	custom hostgroups in soc	2023-02-24 14:24:47 -05:00
Mike Reeves	afccd3f820	comment out minion installs for now	2023-02-24 12:21:14 -05:00
Mike Reeves	a0eb505db0	Add fireall custom groups	2023-02-24 11:12:17 -05:00
Mike Reeves	99105c7563	Add fireall custom groups	2023-02-24 10:43:41 -05:00
Mike Reeves	1289500e03	unfix playbook fix	2023-02-24 09:55:49 -05:00
m0duspwnens	399e4de73c	stop and disable firewalld	2023-02-23 11:04:23 -05:00
m0duspwnens	96b1fb4782	change to eval	2023-02-23 10:51:14 -05:00
Mike Reeves	7987cde668	Merge branch 'reposync' of https://github.com/Security-Onion-Solutions/securityonion into reposync	2023-02-22 16:25:04 -05:00
Mike Reeves	8e83407974	change playbook to use hostname	2023-02-22 16:24:35 -05:00
m0duspwnens	0d0a61bd4a	remove so-grafana from node containers	2023-02-22 15:29:30 -05:00
m0duspwnens	6dd09fb2c5	remove filebeat	2023-02-22 10:42:45 -05:00
Mike Reeves	76011c96d6	fix conflict	2023-02-22 10:20:14 -05:00
m0duspwnens	cc654fda9f	fw 2.4 update	2023-02-21 15:43:41 -05:00
m0duspwnens	f2b0d67d8b	update fw rules	2023-02-21 15:20:49 -05:00
m0duspwnens	de499ead0c	update fw rules	2023-02-21 15:11:14 -05:00
m0duspwnens	a3bda9b322	podman changes to disable mgmt of iptables	2023-02-21 13:48:25 -05:00
Josh Brower	b62cc32b1a	Initial support for IDH	2023-02-21 11:52:37 -05:00
Jason Ertel	4c42671a21	Merge branch '2.4/dev' into kilo	2023-02-08 13:49:07 -05:00
Jason Ertel	ea0c3db8e1	upgrade influxdb	2023-02-08 13:23:45 -05:00
m0duspwnens	31daeef30d	2.4 fw changes	2023-02-08 11:01:26 -05:00
m0duspwnens	fb7ebcac7e	2.4 fw changes	2023-02-08 09:18:05 -05:00
m0duspwnens	e0e094cd95	rename sosbip and sosrange to sobip and sorange	2023-02-03 10:10:51 -05:00
m0duspwnens	a37f0fd0c0	rename sosbridge to sobridge	2023-02-03 10:07:07 -05:00
m0duspwnens	df9ef9ffc7	add managersearch	2023-02-03 09:55:33 -05:00
m0duspwnens	3e808a70fa	allow managersearch. comment out localhost allow in setup	2023-02-02 12:11:03 -05:00
m0duspwnens	6f1438148f	allow elastic agent access	2023-01-31 16:54:46 -05:00
m0duspwnens	16e1e297a0	allow elasticsearch_rest	2023-01-31 13:32:33 -05:00
m0duspwnens	aa411e2682	allow influxdb on manager and managersearch	2023-01-31 12:42:46 -05:00
m0duspwnens	0ba193c7a4	allow docker_registry fw	2023-01-31 10:55:14 -05:00
m0duspwnens	75d73e4620	add yum portgroups for amnager	2023-01-26 15:35:22 -05:00
m0duspwnens	2fed977692	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-01-26 13:55:09 -05:00
m0duspwnens	f2d3298f14	allow nodes to connect to salt for manager and managersearch	2023-01-26 13:54:52 -05:00
Wes	7d68ef0e8b	Add Elastic Agent and Fleet to firewall configuration for Import Mode	2023-01-26 16:07:31 +00:00
weslambert	6ee66a34bc	Revert "Elastic Agent and Fleet - Import Mode"	2023-01-25 17:12:03 -05:00
Wes	c3717dae67	Add Elastic Fleet firewall configuration for Import Mode	2023-01-25 18:27:00 +00:00
m0duspwnens	d501b0fac9	add elastic agent to assigned hostgroups	2023-01-18 09:46:55 -05:00
m0duspwnens	aa858bab45	fix iptables	2023-01-17 13:48:39 -05:00
m0duspwnens	a69b0951d3	add strelka containers	2023-01-12 16:47:34 -05:00
m0duspwnens	d163d834d4	allow for binding ip and ports to different port number	2023-01-12 16:42:45 -05:00