6828 Commits

Author	SHA1	Message	Date
Jason Ertel	0eec8b22a2	influx upgrade	2023-02-09 18:27:14 -05:00
Jason Ertel	0e50d36da6	upgrade influx	2023-02-09 16:18:04 -05:00
Jason Ertel	067b6bacd1	merge from 2.4/dev	2023-02-09 11:57:51 -05:00
Wes	ee7f299e6d	Fix typo - 'Kratos' to 'Kibana'	2023-02-09 15:56:36 +00:00
Wes	bb6fc8da19	Add policy templates for other logs	2023-02-09 15:51:58 +00:00
weslambert	b744dc0641	Add so-eval to list of modes using the Elasticsearch output for Elastic Agent and Fleet	2023-02-09 09:35:29 -05:00
weslambert	613793ad9b	Temporarily use Elasticsearch output for Standalone installations	2023-02-09 09:32:04 -05:00
Jason Ertel	28eee48a7c	influx upgrade	2023-02-08 20:38:29 -05:00
Jason Ertel	849e53e1eb	upgrade influx	2023-02-08 17:40:27 -05:00
Josh Patterson	131d9b5898	Merge pull request #9747 from Security-Onion-Solutions/2.4/firewall ... ensure node_data is populated with self	2023-02-08 17:29:07 -05:00
m0duspwnens	8a00521092	ensure node_data is populated with self if logstash:nodes data doesnt exist, ie import node	2023-02-08 17:19:20 -05:00
Wes	b319b50fa1	Add initial ILM status script	2023-02-08 21:39:33 +00:00
Wes	1d6c03feb1	Rename initial ILM lifecycle status explanation script	2023-02-08 21:34:39 +00:00
Wes	91d24d36f9	Add initial ILM lifecycle status explanation script	2023-02-08 21:34:15 +00:00
Wes	3e31bda285	Fix typo in Elasticsearch portion of script names	2023-02-08 21:32:17 +00:00
Wes	1de3871ee9	Add initial ILM service restart script	2023-02-08 21:30:25 +00:00
Wes	03849b0659	Add initial ILM service start script	2023-02-08 21:29:38 +00:00
Wes	b38f4ca766	Add initial ILM service stop script	2023-02-08 21:29:16 +00:00
Wes	8027055086	Add initial ILM policy delete script	2023-02-08 21:09:42 +00:00
Jason Ertel	8ff0cf21cd	influx upgrade	2023-02-08 16:03:10 -05:00
Wes	d6d01f8542	Add initial ILM policy view script	2023-02-08 21:01:02 +00:00
Jason Ertel	c43e69ad93	influx upgrade	2023-02-08 15:57:14 -05:00
Wes	713e9ee215	Create initial template for ILM policy load script	2023-02-08 20:10:41 +00:00
Jason Ertel	22eaeb1462	upgrade influx	2023-02-08 15:00:44 -05:00
Jason Ertel	2fddcc1e99	upgrade influx	2023-02-08 14:57:57 -05:00
Jason Ertel	44e60f1e57	upgrade influx	2023-02-08 14:03:27 -05:00
Jason Ertel	51674b3a5b	upgrade influx	2023-02-08 13:50:32 -05:00
Jason Ertel	4c42671a21	Merge branch '2.4/dev' into kilo	2023-02-08 13:49:07 -05:00
Jason Ertel	a1ac1785d3	upgrade influx	2023-02-08 13:40:27 -05:00
Jason Ertel	ea0c3db8e1	upgrade influxdb	2023-02-08 13:23:45 -05:00
m0duspwnens	31daeef30d	2.4 fw changes	2023-02-08 11:01:26 -05:00
m0duspwnens	fb7ebcac7e	2.4 fw changes	2023-02-08 09:18:05 -05:00
m0duspwnens	e8a1e164aa	add so.version module	2023-02-03 10:58:08 -05:00
m0duspwnens	e0e094cd95	rename sosbip and sosrange to sobip and sorange	2023-02-03 10:10:51 -05:00
m0duspwnens	a37f0fd0c0	rename sosbridge to sobridge	2023-02-03 10:07:07 -05:00
m0duspwnens	6e45f1b6e1	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-02-03 09:55:50 -05:00
m0duspwnens	df9ef9ffc7	add managersearch	2023-02-03 09:55:33 -05:00
m0duspwnens	3e808a70fa	allow managersearch. comment out localhost allow in setup	2023-02-02 12:11:03 -05:00
Wes	bc082dff99	Only run Zeek if it is defined as 'mdengine'	2023-02-02 16:22:42 +00:00
m0duspwnens	33787d345b	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-02-02 10:04:01 -05:00
m0duspwnens	9eae31e488	add managersearch to allowed roles for so-firewall. fix setup error from so-firewall "Please specify a role with --role="	2023-02-02 10:03:22 -05:00
Wes	5fba3c5872	Add Suricata metadata configuration	2023-02-02 14:48:01 +00:00
m0duspwnens	3ba64f7545	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-02-02 09:31:40 -05:00
weslambert	d242050627	Disable loading of Kibana and Logstash logs for now since there are issues with the packages from the registry	2023-02-01 15:59:35 -05:00
weslambert	2101ca60e9	Add 'configured_vulns_ext_vars.yar' to exclusion list	2023-02-01 14:25:46 -05:00
m0duspwnens	d2dd68eb44	add global vars for managersearch	2023-02-01 11:31:36 -05:00
m0duspwnens	6ec086e24a	add influxdb as extra_hosts for grafana container	2023-01-31 17:10:11 -05:00
m0duspwnens	6f1438148f	allow elastic agent access	2023-01-31 16:54:46 -05:00
m0duspwnens	12bede5e77	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-01-31 16:10:50 -05:00
weslambert	056bcd0121	Merge pull request #9683 from Security-Onion-Solutions/fix/kibana_osquery_live_query_link_remove ... Remove OSQuery live query link	2023-01-31 13:38:07 -05:00