 weslambert
|
486de12ca5
|
Delete logs-system-auth-syslog-close.yaml
|
2023-03-13 17:27:52 -04:00 |
|
|
weslambert
|
f4112b30c0
|
Fix index reference for system auth default
|
2023-03-13 17:27:06 -04:00 |
|
|
weslambert
|
bab40de58d
|
Fix system auth default key value
|
2023-03-13 17:26:05 -04:00 |
|
|
weslambert
|
785f100132
|
Fix system auth default key value
|
2023-03-13 17:25:33 -04:00 |
|
|
weslambert
|
8ade7b85fc
|
Fix system syslog default key value
|
2023-03-13 17:24:40 -04:00 |
|
|
weslambert
|
c2701f1835
|
Fix system syslog default key value
|
2023-03-13 17:24:12 -04:00 |
|
|
weslambert
|
d5bb223235
|
Fix system syslog delete file configuration
|
2023-03-13 17:10:52 -04:00 |
|
|
Wes
|
efc5832499
|
Add Elastic Agent default log action files
|
2023-03-13 20:54:38 +00:00 |
|
|
Wes
|
8d395dc465
|
Add Elastic Agent default data stream backing indices for management by Curator
|
2023-03-13 20:54:13 +00:00 |
|
 m0duspwnens
|
9d4e1cc149
|
jinja for strelka
|
2023-03-13 16:48:21 -04:00 |
|
 Josh Brower
|
f7be4ba31c
|
Remove host field from NIDS logs
|
2023-03-13 14:07:17 -04:00 |
|
|
Josh Brower
|
126add7ddd
|
Merge pull request #9922 from Security-Onion-Solutions/2.4/fieldfixes
auto-apply firewall rules
|
2023-03-13 12:00:28 -04:00 |
|
|
Josh Brower
|
b3a2680847
|
auto-apply firewall rules
|
2023-03-13 11:41:36 -04:00 |
|
|
Wes
|
e105e56fac
|
Move data stream configuration outside of ILM policy definition
|
2023-03-13 13:27:02 +00:00 |
|
|
m0duspwnens
|
58343e39fa
|
2.4 strelka
|
2023-03-10 17:32:14 -05:00 |
|
|
weslambert
|
16d9478196
|
Add index lifecycle management policy definitions for default Elastic Agent data streams
|
2023-03-10 16:54:47 -05:00 |
|
 Jason Ertel
|
5804409fcf
|
Merge branch '2.4/dev' into kilo
|
2023-03-10 15:13:57 -05:00 |
|
|
Josh Brower
|
2fe8668f1b
|
Merge pull request #9891 from Security-Onion-Solutions/2.4/huntqueries
Initial updates for 2.4 fieldnames
|
2023-03-09 14:37:50 -05:00 |
|
|
Josh Brower
|
73abf8dbfd
|
Generic host dashboard
|
2023-03-09 14:32:52 -05:00 |
|
|
Josh Brower
|
1493806040
|
Change host dashboard titles
|
2023-03-08 17:03:02 -05:00 |
|
|
Josh Brower
|
a5c89bfaa1
|
update sysmon dashboards
|
2023-03-08 16:49:34 -05:00 |
|
|
Jason Ertel
|
b9e3024521
|
fix user sync issue after setup finishes
|
2023-03-08 15:10:31 -05:00 |
|
|
m0duspwnens
|
61879a8d33
|
merge with dev and resolve conflicts in salt/top
|
2023-03-08 09:04:09 -05:00 |
|
|
Jason Ertel
|
0f456e6ecd
|
Merge branch '2.4/dev' into kilo
|
2023-03-07 16:18:30 -05:00 |
|
|
weslambert
|
2d7ce41a70
|
Remove reference to 'so-curator-cluster-warm' script since it has been removed
|
2023-03-07 16:16:55 -05:00 |
|
|
weslambert
|
a738c7c36d
|
Merge pull request #9907 from Security-Onion-Solutions/fix/curator_global_delete_action
Add the new Security Onion index format to the global delete action file for Curator
|
2023-03-07 16:03:28 -05:00 |
|
|
Jason Ertel
|
a3e05d782e
|
Merge branch '2.4/dev' into kilo
|
2023-03-07 15:26:01 -05:00 |
|
|
weslambert
|
e93c052d34
|
Add the new index format to the global delete action file for Curator
|
2023-03-07 15:21:53 -05:00 |
|
|
Josh Brower
|
fd2312a2ac
|
Remove EA install from manager highstates
|
2023-03-07 15:13:35 -05:00 |
|
|
Jason Ertel
|
4f3cb2eb3d
|
Clarify playbook load time log message
|
2023-03-07 14:42:10 -05:00 |
|
|
Wes
|
f50639d2d2
|
Fix import and syslog actions
|
2023-03-07 17:41:48 +00:00 |
|
|
Wes
|
26c9813276
|
Add keys for new Curator actions to defaults.yaml
|
2023-03-07 17:29:07 +00:00 |
|
|
Wes
|
88d98af243
|
Add new Curator action files to Curator close and delete scripts
|
2023-03-07 17:21:03 +00:00 |
|
|
Wes
|
d636546871
|
Add new Curator action files
|
2023-03-07 17:15:25 +00:00 |
|
|
Wes
|
073054b447
|
Remove 'so-curator-cluster-warm' and remove unncessary Curator default values
|
2023-03-07 16:21:55 +00:00 |
|
|
Wes
|
df94e830c5
|
Remove unnecessary Curator action files
|
2023-03-07 16:15:41 +00:00 |
|
|
m0duspwnens
|
2767d4bee3
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode
|
2023-03-07 10:36:12 -05:00 |
|
|
m0duspwnens
|
14aa9ac5c9
|
apply elastic-fleet state to managers
|
2023-03-07 10:35:49 -05:00 |
|
|
Wes
|
086b3bf528
|
Add Curator to so-status output
|
2023-03-07 15:14:53 +00:00 |
|
|
Jason Ertel
|
66bb829505
|
if -i, either success or failure must be present
|
2023-03-06 22:18:08 -05:00 |
|
|
Jason Ertel
|
b641dc37b6
|
use high error code to flag an unrecoverable error
|
2023-03-06 18:56:04 -05:00 |
|
|
Jason Ertel
|
f77068f73f
|
setup and so-verify/so-status interop
|
2023-03-06 18:37:37 -05:00 |
|
|
m0duspwnens
|
691080de88
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode
|
2023-03-06 16:04:14 -05:00 |
|
|
Josh Brower
|
a6db2d4502
|
Fleet - setup ES output for all Managers
|
2023-03-06 15:50:09 -05:00 |
|
|
m0duspwnens
|
0f9803120e
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode
|
2023-03-06 13:55:09 -05:00 |
|
|
m0duspwnens
|
b6d55bedc8
|
make influxdb token accessible to all nodes
|
2023-03-06 13:50:17 -05:00 |
|
|
Josh Brower
|
8fae826a3a
|
Merge pull request #9890 from Security-Onion-Solutions/2.4/fixosquerylink
Fixup osquery SO Hunt link
|
2023-03-06 07:25:00 -05:00 |
|
 Doug Burks
|
a2bda07820
|
add VLAN dashboard
|
2023-03-05 15:24:11 -05:00 |
|
|
Doug Burks
|
19ab2a5a46
|
rename suricata vlan field to network.vlan.id
|
2023-03-05 05:57:52 -05:00 |
|
|
Josh Brower
|
9db6df0f14
|
Initial updates for 2.4 fieldnames
|
2023-03-04 15:19:19 -05:00 |
|