11227 Commits

Author	SHA1	Message	Date
DefensiveDepth	0ff8fa57e7	be more verbose	2025-12-08 10:29:24 -05:00
DefensiveDepth	0f42233092	Make sure local salt dir is created	2025-12-07 16:13:55 -05:00
DefensiveDepth	271f545f4f	Fixup Airgap	2025-12-06 15:26:44 -05:00
DefensiveDepth	bef85772e3	Merge branch 'idstools-refactor' of https://github.com/Security-Onion-Solutions/securityonion into idstools-refactor	2025-12-05 12:17:06 -05:00
DefensiveDepth	a6b19c4a6c	Remove idstools config from manager pillar file	2025-12-05 12:13:05 -05:00
Josh Brower	44f5e6659b	Merge branch '2.4/dev' into idstools-refactor	2025-12-05 10:30:54 -05:00
DefensiveDepth	3f9a9b7019	tweak threshold	2025-12-05 10:23:24 -05:00
DefensiveDepth	b7ad985c7a	Add cron.abset	2025-12-05 09:48:46 -05:00
DefensiveDepth	9304513ce8	Add support for suricata rules load status	2025-12-04 12:26:13 -05:00
reyesj2	0b127582cb	2.4.200 soup changes	2025-12-03 20:49:25 -06:00
reyesj2	ef87ad77c3	Merge branch 'reyesj2/advilm' of github.com:Security-Onion-Solutions/securityonion into reyesj2/advilm	2025-12-03 20:23:03 -06:00
reyesj2	8477420911	logstash adv config state file	2025-12-03 20:10:06 -06:00
DefensiveDepth	f15a39c153	Add historical hashes	2025-12-03 11:24:04 -05:00
DefensiveDepth	41b3ac7554	Backup salt master config	2025-12-02 19:58:56 -05:00
DefensiveDepth	23575fdf6c	edit actual file	2025-12-02 19:19:57 -05:00
DefensiveDepth	52f70dc49a	Cleanup idstools	2025-12-02 17:40:30 -05:00
DefensiveDepth	79c9749ff7	Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor	2025-12-02 17:40:04 -05:00
Jorge Reyes	8d2701e143	Merge branch '2.4/dev' into reyesj2/advilm	2025-12-02 15:42:15 -06:00
reyesj2	877444ac29	cert update is a forced update	2025-12-02 15:16:59 -06:00
reyesj2	b0d9426f1b	automated cert update for kafka fleet output policy	2025-12-02 15:11:00 -06:00
reyesj2	18accae47e	annotation typo	2025-12-02 15:10:29 -06:00
Josh Patterson	ef092e2893	rename to removelistitem	2025-12-02 15:01:32 -05:00
Josh Patterson	89eb95c077	add removefromlist	2025-12-02 14:46:24 -05:00
Josh Patterson	e871ec358e	need additional line bw class	2025-12-02 14:43:33 -05:00
Josh Patterson	d6bd951c37	add new so-yaml_test for removefromlist	2025-12-02 14:31:57 -05:00
DefensiveDepth	8abd4c9c78	Remove idstools files	2025-12-02 12:42:15 -05:00
reyesj2	45a8c0acd1	merge 2.4/dev	2025-12-02 11:16:08 -06:00
DefensiveDepth	c372cd533d	Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor	2025-12-01 16:10:22 -05:00
DefensiveDepth	999f83ce57	Create dir earlier	2025-12-01 14:21:58 -05:00
Jorge Reyes	6fbed2dd9f	Merge pull request #15264 from Security-Onion-Solutions/reyesj2-patch-2 ... add force & certs flag to update fleet certs as needed	2025-12-01 11:11:25 -06:00
Mike Reeves	63bb44886e	Add JA4D option to config.zeek.ja4	2025-12-01 10:00:42 -05:00
DefensiveDepth	bda83a47a2	Remove header	2025-11-29 17:45:22 -05:00
DefensiveDepth	e96cfd35f7	Refactor for simplicity	2025-11-29 17:00:51 -05:00
DefensiveDepth	65c96b2edf	Add error handling	2025-11-29 16:27:22 -05:00
DefensiveDepth	87477ae4f6	Removed uneeded bind	2025-11-29 15:40:10 -05:00
DefensiveDepth	89a9106d79	Add context	2025-11-29 15:17:28 -05:00
DefensiveDepth	1284150382	Move to manager init	2025-11-27 08:39:19 -05:00
reyesj2	edf3c9464f	add --certs flag to update certs. Used with --force, to ensure certs are updated even if hosts update isn't needed	2025-11-25 16:16:19 -06:00
DefensiveDepth	4bb0a7c9d9	Merge remote-tracking branch 'origin/2.4/dev' into idstools-refactor	2025-11-25 13:52:21 -05:00
DefensiveDepth	ced3af818c	Refactor for Airgap	2025-11-25 13:51:50 -05:00
reyesj2	cc8fb96047	valid config for number_of_replicas in allocate action includes 0	2025-11-24 11:12:09 -06:00
reyesj2	3339b50daf	drop forcemerge when max_num_segements doesn't exist or empty	2025-11-21 16:39:45 -06:00
reyesj2	415ea07a4f	clean up	2025-11-21 16:04:26 -06:00
reyesj2	b80ec95fa8	update regex, revert to default will allow setting value back to '' | None	2025-11-21 14:41:03 -06:00
reyesj2	99cb51482f	unneeded 'set'	2025-11-21 14:32:58 -06:00
reyesj2	90638f7a43	Merge branch 'reyesj2/advea' into reyesj2/advilm	2025-11-21 14:25:28 -06:00
reyesj2	1fb00c8eb6	update so-elastic-fleet-outputs-update to use advanced output options when set, else empty "". Also trigger update_logstash_outputs() when hash of config_yaml has changed	2025-11-21 14:22:42 -06:00
reyesj2	4490ea7635	format EA logstash output adv config items	2025-11-21 14:21:17 -06:00
reyesj2	bce7a20d8b	soc configurable EA logstash output adv settings	2025-11-21 14:19:51 -06:00
Josh Patterson	23da0d4ba0	use timestamp in filename to prevent duplicates	2025-11-21 14:49:03 -05:00