Commit Graph

11724 Commits

Author SHA1 Message Date
Wes
88d98af243 Add new Curator action files to Curator close and delete scripts 2023-03-07 17:21:03 +00:00
Wes
d636546871 Add new Curator action files 2023-03-07 17:15:25 +00:00
weslambert
f0b7a75ae8 Merge pull request #9904 from Security-Onion-Solutions/fix/curator_clean_up_action_files
Clean Up Old Curator Action Files
2023-03-07 11:52:28 -05:00
Wes
073054b447 Remove 'so-curator-cluster-warm' and remove unncessary Curator default values 2023-03-07 16:21:55 +00:00
Wes
df94e830c5 Remove unnecessary Curator action files 2023-03-07 16:15:41 +00:00
m0duspwnens
2767d4bee3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-03-07 10:36:12 -05:00
m0duspwnens
14aa9ac5c9 apply elastic-fleet state to managers 2023-03-07 10:35:49 -05:00
weslambert
deda0fa279 Merge pull request #9902 from Security-Onion-Solutions/fix/so-status_curator
Add Curator to so-status Output
2023-03-07 10:17:14 -05:00
Wes
086b3bf528 Add Curator to so-status output 2023-03-07 15:14:53 +00:00
Jason Ertel
66bb829505 if -i, either success or failure must be present 2023-03-06 22:18:08 -05:00
Jason Ertel
b641dc37b6 use high error code to flag an unrecoverable error 2023-03-06 18:56:04 -05:00
Jason Ertel
f77068f73f setup and so-verify/so-status interop 2023-03-06 18:37:37 -05:00
m0duspwnens
691080de88 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-03-06 16:04:14 -05:00
Jason Ertel
1998c66073 Merge branch '2.4/dev' into kilo 2023-03-06 15:59:21 -05:00
Jason Ertel
1945659369 Error is too common, found even in dashboard titles 2023-03-06 15:59:08 -05:00
Josh Brower
3eb839bd21 Merge pull request #9897 from Security-Onion-Solutions/2.4/dev-fleet
Fleet - setup ES output for all Managers
2023-03-06 15:54:03 -05:00
Josh Brower
a6db2d4502 Fleet - setup ES output for all Managers 2023-03-06 15:50:09 -05:00
m0duspwnens
0f9803120e Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-03-06 13:55:09 -05:00
m0duspwnens
b6d55bedc8 make influxdb token accessible to all nodes 2023-03-06 13:50:17 -05:00
Josh Brower
8fae826a3a Merge pull request #9890 from Security-Onion-Solutions/2.4/fixosquerylink
Fixup osquery SO Hunt link
2023-03-06 07:25:00 -05:00
Doug Burks
1e31966d8d Merge pull request #9893 from Security-Onion-Solutions/2.4/enable-zeek-vlan
2.4/enable zeek vlan
2023-03-06 07:20:45 -05:00
Doug Burks
a2bda07820 add VLAN dashboard 2023-03-05 15:24:11 -05:00
Doug Burks
19ab2a5a46 rename suricata vlan field to network.vlan.id 2023-03-05 05:57:52 -05:00
Josh Brower
9db6df0f14 Initial updates for 2.4 fieldnames 2023-03-04 15:19:19 -05:00
Josh Brower
f0db5cf657 Fixup osquery SO Hunt link 2023-03-04 11:50:01 -05:00
Doug Burks
4a2e75dd8c fix formatting 2023-03-03 17:16:45 -05:00
Jason Ertel
a45763f9a2 Merge branch '2.4/dev' into kilo 2023-03-03 16:01:06 -05:00
Doug Burks
e24296d536 add SOC Dashboards groupby for Zeek conn vlan field 2023-03-03 15:23:43 -05:00
Doug Burks
9940a36722 update Elasticsearch ingest for Zeek conn vlan field 2023-03-03 15:22:43 -05:00
Doug Burks
adb925b4d6 enable zeek vlan script 2023-03-03 12:48:42 -05:00
m0duspwnens
e3f9b5297a Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-03-02 16:58:56 -05:00
Jason Ertel
fd2068be88 Switch back to kilo images 2023-03-02 15:23:53 -05:00
m0duspwnens
e6167dc34a heavynode changes 2023-03-02 15:09:59 -05:00
Mike Reeves
26dbaeb7ac Merge pull request #9882 from Security-Onion-Solutions/TOoSmOotH-patch-5
Update so-functions
2023-03-02 11:36:24 -05:00
Mike Reeves
2b0ea8eb8b Update so-functions 2023-03-02 11:34:36 -05:00
weslambert
196a6ce984 Merge pull request #9881 from Security-Onion-Solutions/fix/curator_configuration_update_8.0.x
Update Curator configuration to align with requirements for Curator 8.0.x
2023-03-02 08:51:14 -05:00
weslambert
06d1f0f913 Update Curator configuration to align with requirements for Curator 8.0.x 2023-03-02 08:46:52 -05:00
Mike Reeves
204f423051 Merge pull request #9878 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update init.sls
2023-03-01 21:37:17 -05:00
Mike Reeves
af284b9aae Update init.sls 2023-03-01 16:38:48 -05:00
Jason Ertel
41bc1cd36f Merge branch '2.4/dev' into kilo 2023-03-01 09:53:59 -05:00
Mike Reeves
2091806f1f Merge pull request #9864 from Security-Onion-Solutions/setuperrors
Fix some errors in setup
2023-03-01 09:48:20 -05:00
m0duspwnens
704365c6eb only stdout redirect 2023-03-01 09:44:48 -05:00
m0duspwnens
a79c380e2b use cmd.run to populate metrics_link 2023-03-01 09:18:58 -05:00
weslambert
a5c2c0fb20 Merge pull request #9866 from Security-Onion-Solutions/fix/soc_elasticsearch_ilm_annotations_verbiage
Various adjustments to descriptions
2023-02-28 16:46:53 -05:00
m0duspwnens
c4e1ec781e apply influxdb before highstate in setup 2023-02-28 16:31:35 -05:00
Jason Ertel
13182fcda2 refactor automated testing inputs due to streamlined setup process 2023-02-28 16:31:17 -05:00
weslambert
134caa7f58 Various adjustments to descriptions 2023-02-28 16:31:16 -05:00
m0duspwnens
8772dcaa10 ensure influxdb is running 2023-02-28 15:57:54 -05:00
Jason Ertel
205e344034 dynamically choose test NICs in alphanumeric sort order 2023-02-28 15:40:08 -05:00
Jason Ertel
749c299ed2 refactor automated testing inputs due to streamlined setup process 2023-02-28 15:34:09 -05:00