weslambert
|
5142e6ccc7
|
Update so-kibana-config-load
|
2022-01-28 13:01:33 -05:00 |
|
Wes Lambert
|
3b76c2421c
|
Update to allow for passing HL saved objects
|
2022-01-28 17:59:34 +00:00 |
|
m0duspwnens
|
e82c6a2393
|
default for managerupdate should be int not a string
|
2022-01-28 12:50:58 -05:00 |
|
m0duspwnens
|
905ca35e93
|
use sed instead of echo
|
2022-01-28 11:19:54 -05:00 |
|
m0duspwnens
|
3977146a16
|
add receiver to firewall files during soup
|
2022-01-28 10:36:30 -05:00 |
|
Josh Patterson
|
5a37b14809
|
Merge pull request #7017 from Security-Onion-Solutions/issue/7016
dont apply wazuh state on sensors if it is disabled globally
|
2022-01-28 09:33:34 -05:00 |
|
m0duspwnens
|
15c29bda74
|
dont apply wazuh state on sensors if it is disabled globally - https://github.com/Security-Onion-Solutions/securityonion/issues/7016
|
2022-01-28 09:31:02 -05:00 |
|
Josh Patterson
|
d0186c8c1b
|
Merge pull request #7011 from Security-Onion-Solutions/fix/reinstall
https://github.com/Security-Onion-Solutions/securityonion/issues/7010
|
2022-01-27 16:40:37 -05:00 |
|
Jason Ertel
|
ac21bd1e29
|
Merge pull request #7009 from Security-Onion-Solutions/kilo
Add new abbreviated result limit param
|
2022-01-27 15:55:42 -05:00 |
|
Jason Ertel
|
14c587fca2
|
Add new abbreviated result limit param
|
2022-01-27 15:51:02 -05:00 |
|
m0duspwnens
|
6cc8e4355e
|
exclude salt ERROR seen during reinstall
|
2022-01-27 15:31:42 -05:00 |
|
m0duspwnens
|
e63f35a223
|
change to test
|
2022-01-27 15:19:33 -05:00 |
|
weslambert
|
69689b470b
|
Merge pull request #7005 from Security-Onion-Solutions/fix/revert_cases_field_limit
Revert field limit from testing
|
2022-01-27 11:33:31 -05:00 |
|
weslambert
|
fc0a5bce86
|
Revert field limit from testing
|
2022-01-27 11:18:35 -05:00 |
|
weslambert
|
39257df396
|
Merge pull request #7004 from Security-Onion-Solutions/fix/revert_dtc
Revert changes to common template
|
2022-01-27 11:15:50 -05:00 |
|
weslambert
|
60a0204975
|
Revert changes to common template
|
2022-01-27 11:02:47 -05:00 |
|
William Wernert
|
c6b11f4e05
|
Merge pull request #7001 from Security-Onion-Solutions/fix/so-rule-string-split
Fix error message printing in so-rule
|
2022-01-26 16:08:00 -05:00 |
|
William Wernert
|
4532de368a
|
Fix error message printing in so-rule
|
2022-01-26 16:04:45 -05:00 |
|
m0duspwnens
|
9e2278a199
|
Merge remote-tracking branch 'remotes/origin/dev' into fix/reinstall
|
2022-01-26 15:48:46 -05:00 |
|
weslambert
|
e303fb12cf
|
Merge pull request #7000 from Security-Onion-Solutions/fix/zeek_dns_answers_pipeline
Fix Zeek field name so it doesn't conflict with mapping of other dns.…
|
2022-01-26 15:04:12 -05:00 |
|
weslambert
|
8f0a327cb5
|
Fix Zeek field name so it doesn't conflict with mapping of other dns.answers fields
|
2022-01-26 15:02:59 -05:00 |
|
weslambert
|
bdc5e89822
|
Merge pull request #6999 from Security-Onion-Solutions/fix/case_mapping_changes_temp
Mapping changes for case index
|
2022-01-26 14:59:45 -05:00 |
|
weslambert
|
1b3e7f9d79
|
Temp changes while adjusting mapping
|
2022-01-26 14:57:16 -05:00 |
|
Josh Patterson
|
4f30d43611
|
Merge pull request #6998 from Security-Onion-Solutions/es_binds
mount repo dir in container same as defined on host
|
2022-01-26 13:59:17 -05:00 |
|
m0duspwnens
|
c80adc0430
|
mount repo dir in container same as defined on host
|
2022-01-26 13:42:56 -05:00 |
|
weslambert
|
e77648c475
|
Merge pull request #6994 from Security-Onion-Solutions/feature/dtc
Additional DTC changes
|
2022-01-26 12:22:48 -05:00 |
|
Jason Ertel
|
c2636036ee
|
Merge pull request #6995 from Security-Onion-Solutions/kilo
store related event data as a flattened object blob
|
2022-01-26 12:21:02 -05:00 |
|
Wes Lambert
|
e10749a495
|
Additional changes to template to accomodate default fields and keyword subfield
|
2022-01-26 17:16:29 +00:00 |
|
Jason Ertel
|
ed9b74dc33
|
store related event data as a flattened object blob
|
2022-01-26 12:16:05 -05:00 |
|
m0duspwnens
|
2aa19b78da
|
dont remove ca-certificates.crt
|
2022-01-26 11:27:35 -05:00 |
|
m0duspwnens
|
1337af9d69
|
more dupes
|
2022-01-26 11:07:06 -05:00 |
|
m0duspwnens
|
a0e493a186
|
remove dupe ids
|
2022-01-26 10:50:35 -05:00 |
|
m0duspwnens
|
a43fb293fc
|
remove role logic
|
2022-01-26 10:26:52 -05:00 |
|
m0duspwnens
|
8aa002b82e
|
add states to remove ca and ssl keys and certs and call them during reinstall.
|
2022-01-26 09:33:19 -05:00 |
|
m0duspwnens
|
8ce0f5b7be
|
log removal of root cron
|
2022-01-26 08:31:37 -05:00 |
|
Josh Patterson
|
26e03ccad2
|
Merge pull request #6978 from Security-Onion-Solutions/es_binds
allow for path.repo mounts for elasticsearch
|
2022-01-25 16:13:49 -05:00 |
|
m0duspwnens
|
dd00e3babc
|
use .get since repo may not exist
|
2022-01-25 13:18:21 -05:00 |
|
m0duspwnens
|
5d2b3992e2
|
dont need to set ES_PATH_REPO
|
2022-01-25 13:11:53 -05:00 |
|
m0duspwnens
|
7b6eeac03f
|
dnt mount under /repo in the container
|
2022-01-25 13:08:46 -05:00 |
|
m0duspwnens
|
00e17d5c78
|
put repos in /repo in es container
|
2022-01-25 13:03:54 -05:00 |
|
m0duspwnens
|
a17e1aa87a
|
930 for group
|
2022-01-25 13:00:04 -05:00 |
|
m0duspwnens
|
4423e93880
|
prevent path.repo from being put in elasticsearch.yml if the symlink doesnt exist
|
2022-01-25 12:57:05 -05:00 |
|
m0duspwnens
|
e62de2934c
|
fix test for es repo
|
2022-01-25 12:24:03 -05:00 |
|
m0duspwnens
|
a92e2a917b
|
change repos to repo
|
2022-01-25 10:53:28 -05:00 |
|
m0duspwnens
|
a72f12c4c7
|
add path.repo mount if symlink exists
|
2022-01-25 10:50:00 -05:00 |
|
Josh Patterson
|
9a45a9799b
|
Merge pull request #6974 from Security-Onion-Solutions/issue/6599
https://github.com/Security-Onion-Solutions/securityonion/issues/6599
|
2022-01-25 09:11:33 -05:00 |
|
weslambert
|
ba52bd3835
|
Update template with syntax fixes
|
2022-01-25 08:56:03 -05:00 |
|
m0duspwnens
|
edd8709cdd
|
remove export LC_CTYPE="en_US.UTF-8" from soup
|
2022-01-24 19:42:56 -05:00 |
|
m0duspwnens
|
d6fc436d49
|
copy files to default salt base
|
2022-01-24 19:30:34 -05:00 |
|
m0duspwnens
|
82e2b2b611
|
dont escape raw and endraw
|
2022-01-24 17:03:25 -05:00 |
|