Commit Graph
100 Commits
Author SHA1 Message Date
Josh BrowerandGitHub af68af7f18 Merge pull request #11317 from Security-Onion-Solutions/2.4/fixes
Regex & Transform Role
2023-09-14 10:59:56 -04:00
defensivedepth 0c11a9b733 Add transform role 2023-09-14 09:33:17 -04:00
defensivedepth 59d077f3ff Fix regex 2023-09-14 08:32:17 -04:00
Josh BrowerandGitHub c92b359b79 Merge pull request #11116 from Security-Onion-Solutions/2.4/hotfixcerts
Fix certs on Rec and Heavy
2023-08-21 07:30:44 -04:00
Josh Brower e2fd371886 Fix certs on Rec and Heavy 2023-08-21 07:26:37 -04:00
Josh BrowerandGitHub 5b453ca972 Merge pull request #11113 from Security-Onion-Solutions/2.4/rec-certs-fix
Fix certs for Rec & Heavy
2023-08-21 07:03:58 -04:00
Josh Brower 6784bdcb54 Fix certs for Rec & Heavy 2023-08-20 15:46:07 -04:00
Josh BrowerandGitHub faca36e74c Merge pull request #11021 from Security-Onion-Solutions/2.4/esurlfixup
Set default for import and eval only
2023-08-12 08:41:54 -04:00
Josh Brower f38b77892b Move back 2023-08-11 17:14:48 -04:00
Josh Brower 00297cd864 Move from post to pre 2023-08-11 16:10:16 -04:00
Josh Brower ce63e47fcd Enable forced update 2023-08-11 14:47:33 -04:00
Josh Brower 3f054031a0 Set default for import and eval only 2023-08-11 13:32:22 -04:00
Josh BrowerandGitHub 7112d53d4d Merge pull request #11014 from Security-Onion-Solutions/2.4/templateloadfix
Upgrade integration packages
2023-08-10 20:00:57 -04:00
Josh Brower 1d83b2f2e6 Add elasticsearch integration 2023-08-10 19:51:12 -04:00
Josh Brower a724b95441 Merge branch '2.4/dev' into 2.4/templateloadfix 2023-08-10 19:01:24 -04:00
Josh Brower 0d894b7f52 Upgrade integration packages 2023-08-10 18:57:17 -04:00
Josh BrowerandGitHub 2680a50927 Merge pull request #11004 from Security-Onion-Solutions/2.4/esurlfix
Unset defaults
2023-08-10 08:50:56 -04:00
Josh Brower 874dab7535 Unset defaults 2023-08-09 19:02:53 -04:00
Josh BrowerandGitHub fe9917ef1c Merge pull request #11002 from Security-Onion-Solutions/2.4/fixfqdn
Move base_url to cert SAN
2023-08-09 16:41:09 -04:00
Josh Brower e844cf11db Move base_url to cert SAN 2023-08-09 16:38:27 -04:00
Josh BrowerandGitHub 1a37c43c98 Merge pull request #10997 from Security-Onion-Solutions/2.4/autoupgrade
Enable Agent Upgrade Check during highstate
2023-08-09 10:58:26 -04:00
Josh Brower bf78faa0f0 Enable upgrade check during state run 2023-08-09 10:43:34 -04:00
Josh BrowerandGitHub 204ef7e68f Merge pull request #10994 from Security-Onion-Solutions/2.4/autoupgrade
RC2 Fixes
2023-08-09 09:47:57 -04:00
Josh Brower e586d6b967 Extract Elastic Agent tarball for airgap soup 2023-08-09 08:30:19 -04:00
Josh Brower 4297d51a2d Refactor for multiple agents 2023-08-09 08:14:52 -04:00
Josh Brower e1e535b009 Retry if exit code is error 2023-08-08 18:38:18 -04:00
Josh BrowerandGitHub 8455d3da6f Merge pull request #10977 from Security-Onion-Solutions/2.4/squashbug
Set as default
2023-08-08 15:55:58 -04:00
Josh Brower 8611d1848c Set as default 2023-08-07 15:55:53 -04:00
Josh BrowerandGitHub 9b656ebbc0 Merge pull request #10960 from Security-Onion-Solutions/2.4/fleetcustomfqdn
Refactor to remove new line
2023-08-04 16:16:43 -04:00
Josh Brower 9d3744aa25 Refactor to remove new line 2023-08-04 16:05:28 -04:00
Josh BrowerandGitHub d3ae2b03f0 Merge pull request #10947 from Security-Onion-Solutions/2.4/comm_id
Generate community_id for defend endpoint logs
2023-08-04 09:07:35 -04:00
Josh Brower dd1fa51eb5 Generate community_id for defend endpoint logs 2023-08-04 09:03:17 -04:00
Josh BrowerandGitHub 4ed0ba5040 Merge pull request #10946 from Security-Onion-Solutions/2.4/logstashfix
Don't watch certs on search nodes
2023-08-03 19:01:13 -04:00
Josh Brower 2472d6a727 Don't watch certs on search nodes 2023-08-03 18:52:29 -04:00
Josh BrowerandGitHub dc7ce5ba8f Merge pull request #10941 from Security-Onion-Solutions/2.4/defendupdate
Update for 8.8.2
2023-08-03 16:28:56 -04:00
Josh Brower 6b5343f582 Update for 8.8.2 2023-08-03 16:25:02 -04:00
Josh BrowerandGitHub 8966617508 Merge pull request #10926 from Security-Onion-Solutions/2.4/FleetEnhancments
2.4/fleet-Enhancements
2023-08-03 15:28:03 -04:00
Josh Brower e78fcbc6cb Refactor for Jinja instead 2023-08-03 15:25:11 -04:00
Josh Brower 27b70cbf68 Use jinja instead 2023-08-03 15:21:20 -04:00
Josh Brower 1bc7bbc76e Refactor custom_fqdn 2023-08-02 20:02:37 -04:00
Josh Brower 399758cd5f Merge remote-tracking branch 'origin/2.4/dev' into 2.4/FleetEnhancments 2023-08-02 17:58:48 -04:00
Josh Brower 1c8a8c460c Restart logstash when certs change 2023-08-02 17:53:29 -04:00
Josh Brower ab28cee7cf Allow multiple Custom Fleet FQDN 2023-08-02 17:45:37 -04:00
Josh Brower f153c1125d Allow multiple Custom Fleet FQDN 2023-08-02 15:23:18 -04:00
Josh BrowerandGitHub aab55c8cf6 Regen Agent Installers 2023-08-02 15:09:26 -04:00
Josh Brower b520c1abb7 Allow multiple Custom Fleet FQDN 2023-08-02 10:36:40 -04:00
Josh Brower 968fee3488 Regen Agent Installers when Fleet URLs change 2023-08-01 13:10:41 -04:00
Josh BrowerandGitHub f27ebc47c1 Merge pull request #10897 from Security-Onion-Solutions/2.4/heavyrc2
2.4/heavyrc2
2023-08-01 09:15:10 -04:00
Josh Brower 63b4bdcebe Merge remote-tracking branch 'origin/2.4/dev' into 2.4/heavyrc2 2023-08-01 08:53:07 -04:00
Josh Brower 64bad0a9cf Merge remote-tracking branch 'origin/2.4/dev' into 2.4/heavyrc2 2023-07-31 15:24:32 -04:00
Josh Brower b6dd347eb8 Heavy Node add manager 2023-07-31 15:22:29 -04:00
Josh Brower a89508f1ae Heavy Node fixes 2023-07-31 15:17:24 -04:00
Josh BrowerandGitHub b1fb05dd28 Merge pull request #10841 from Security-Onion-Solutions/2.4/eqlfields
Fix formatting
2023-07-26 11:25:20 -04:00
Josh Brower 9437a47946 Fix formatting 2023-07-26 10:54:24 -04:00
Josh BrowerandGitHub bdf4f6190d Merge pull request #10829 from Security-Onion-Solutions/2.4/heavynoderedux
Heavy Node fixes
2023-07-26 10:41:42 -04:00
Josh Brower f24a3a51ce Heavy Node fixes 2023-07-25 18:28:41 -04:00
Josh BrowerandGitHub 3ef6ea9155 Merge pull request #10826 from Security-Onion-Solutions/2.4/navfix
Upgrade Nav
2023-07-25 12:26:07 -04:00
Josh Brower 2b38bc778d Upgrade Nav 2023-07-25 12:24:23 -04:00
Josh BrowerandGitHub e19845e41d Merge pull request #10819 from Security-Onion-Solutions/fix/elasticsearch_endpoint
Add endpoint to defaults
2023-07-25 09:11:06 -04:00
Josh Brower 4f94d953c9 Merge remote-tracking branch 'origin/2.4/dev' into fix/elasticsearch_endpoint 2023-07-25 07:42:59 -04:00
Josh BrowerandGitHub 71a83c1fe9 Merge pull request #10815 from Security-Onion-Solutions/2.4/SigmaMappings
2.4/sigma mappings
2023-07-25 07:23:25 -04:00
Josh BrowerandGitHub 067a83a87c Merge pull request #10818 from Security-Onion-Solutions/2.4/fixnavigator
Update & Fix Navigator
2023-07-24 15:13:09 -04:00
Josh Brower 510900e640 Update & Fix Navigator 2023-07-24 13:56:22 -04:00
Josh Brower eead0c42d4 Merge remote-tracking branch 'origin/2.4/dev' into 2.4/SigmaMappings 2023-07-24 09:27:14 -04:00
Josh Brower 741e6039c1 Cleanup for Sigma Rules 2023-07-24 09:25:58 -04:00
Josh BrowerandGitHub 6846487909 Merge pull request #10765 from Security-Onion-Solutions/2.4/FleetEnhancements
Retry install
2023-07-14 13:07:25 -04:00
Josh Brower 2cc0c4c0ac Automatically Update ES URLs 2023-07-14 12:07:32 -04:00
Josh Brower 78db64a419 Auto-managed Fleet Server URLs 2023-07-14 08:40:26 -04:00
Josh Brower fb8a79e112 Retry install 2023-07-13 13:15:01 -04:00
Josh BrowerandGitHub 6f5bb136ff Merge pull request #10753 from Security-Onion-Solutions/2.4/integrationfixes
Update Integration JSON
2023-07-13 07:34:32 -04:00
Josh Brower 40294e2762 Update Integration JSON 2023-07-12 08:49:36 -04:00
Josh BrowerandGitHub b29b264d5c Merge pull request #10740 from Security-Onion-Solutions/2.4/removecomments
Remove Comments
2023-07-11 10:28:41 -04:00
Josh BrowerandGitHub c99e7da5a7 Remove Comments 2023-07-11 10:26:18 -04:00
Josh BrowerandGitHub 5e0015e9ac Merge pull request #10735 from Security-Onion-Solutions/2.4/TagPlaybookAlerts
2.4/tag playbook alerts
2023-07-11 08:37:37 -04:00
Josh BrowerandGitHub 5a72c558cb Tag at top level 2023-07-11 08:35:47 -04:00
Josh BrowerandGitHub a6e907f76c Tag Playbook Alerts 2023-07-11 08:03:15 -04:00
Josh BrowerandGitHub 2d3eb22057 Merge pull request #10732 from Security-Onion-Solutions/2.4/autogenfix
Exclude Import and Eval from autoupdate
2023-07-10 17:18:10 -04:00
Josh Brower 8437fcd94c Exclude Import and Eval from autoupdate 2023-07-10 17:10:08 -04:00
Josh BrowerandGitHub 1b25db4573 Merge pull request #10680 from Security-Onion-Solutions/2.4/fleetautogen
Automatically manage Fleet Logstash Config
2023-07-10 16:26:20 -04:00
Josh Brower 31edf2e8ea Tighten & Document Pipelines 2023-07-10 14:17:42 -04:00
Josh Brower 7805ca8beb Add Failover Support 2023-07-10 10:38:14 -04:00
Josh Brower 8c16feb772 Rename Fleet pipelines 2023-07-09 12:22:55 -04:00
Josh Brower ce1f363424 Allow base_url 2023-07-08 13:30:19 -04:00
Josh Brower e8860a7d2c Fix perms 2023-07-08 09:04:55 -04:00
Josh Brower beb26596fd Merge remote-tracking branch 'origin/2.4/dev' into 2.4/fleetautogen 2023-07-07 19:12:47 -04:00
Josh Brower ff3bb11fbb Elastic Fleet Certs Refactor 2023-07-07 16:44:16 -04:00
Josh Brower 35e7659904 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/fleetautogen 2023-07-03 10:36:29 -04:00
Josh Brower 1baea3bcd5 Add Fleet to Logstash Nodes 2023-06-29 17:24:52 -04:00
Josh Brower 4b069d91ab Check the correct pillar 2023-06-29 11:00:34 -04:00
Josh Brower 7561ec0512 Automatically manage Fleet Logstash Config 2023-06-29 08:52:51 -04:00
Josh BrowerandGitHub c7a1d4758b Merge pull request #10598 from Security-Onion-Solutions/2.4/fix-naming
Remove old var
2023-06-28 07:09:37 -04:00
Josh BrowerandGitHub 8355432356 Merge pull request #10657 from Security-Onion-Solutions/2.4/policy-name-fix
2.4/policy name fix
2023-06-24 19:00:00 -04:00
Josh Brower 2247cafe5f Change policy name 2023-06-24 17:13:28 -04:00
Josh Brower 85a8da6331 Change policy name 2023-06-24 16:58:36 -04:00
Josh BrowerandGitHub ddabab253c Merge pull request #10653 from Security-Onion-Solutions/2.4/heavynode
2.4/heavynode
2023-06-23 19:55:24 -04:00
Josh Brower 336a40d646 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-06-23 15:50:14 -04:00
Josh Brower bb0cfc5253 Create & assign Heavy Node Fleet Policy 2023-06-23 15:49:03 -04:00
Josh Brower a9585b2a7f Fix Elastic Agent for Heavy 2023-06-23 10:45:58 -04:00
Josh Brower 8de01625a8 Add Elastic Agent container for Heavy Nodes 2023-06-22 16:02:42 -04:00
Josh Brower d0d7ab57ca Add Elastic Agent container for Heavy Nodes 2023-06-22 16:02:17 -04:00