Commit Graph

6411 Commits

Author SHA1 Message Date
m0duspwnens 8df9e020ac pillarize elastalert https://github.com/Security-Onion-Solutions/securityonion/issues/1191 2021-01-27 15:35:29 -05:00
m0duspwnens 0ac19142c4 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-27 10:52:05 -05:00
Josh Brower d277bf6d05 Merge pull request #2749 from Security-Onion-Solutions/bugfix/osquery-wel-parsing
Update Osquery Windows Eventlog Parsing
2021-01-27 09:17:17 -05:00
Josh Brower 13ab4c66eb Update Osquery Windows Eventlog Parsing 2021-01-27 09:15:54 -05:00
William Wernert f5c044e3e3 [fix] Log directory fixes
* The playbook log dir is owned by the socore group, so we can use `su root socore`
* Addresses https://github.com/Security-Onion-Solutions/securityonion/pull/2681#issuecomment-767761670
---
* influxdb runs as root, so we can set the log directory permissions to 755 for this service
2021-01-26 16:07:34 -05:00
m0duspwnens be0b2b99e9 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-26 13:48:49 -05:00
William Wernert 1939fe85d7 [fix] Revert directory permission changes 2021-01-26 13:41:10 -05:00
Josh Patterson f8242a931c Merge pull request #2733 from Security-Onion-Solutions/automation/ssh_prompts
fix if statement for isntalling sshpass
2021-01-26 09:57:32 -05:00
m0duspwnens ffd01d6975 fix if statement for isntalling sshpass 2021-01-26 09:49:19 -05:00
m0duspwnens f1faab7b1a Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-26 09:04:00 -05:00
William Wernert 7b2ec05dbf [fix] Add missing fi 2021-01-25 19:57:34 -05:00
Mike Reeves bcd5bdd82d Merge pull request #2730 from Security-Onion-Solutions/telegraf3
Add EPS and RAID status collection for telegraf
2021-01-25 19:37:03 -05:00
Mike Reeves 3b1cea94d1 Merge branch 'dev' into telegraf3 2021-01-25 19:36:49 -05:00
Mike Reeves 88abd284a7 Fix Conflicts 2021-01-25 19:35:32 -05:00
Mike Reeves 891a7592d8 Fix Conflicts 2021-01-25 19:33:49 -05:00
Mike Reeves e43a80b9c6 Add EPS and RAID status collection for telegraf 2021-01-25 19:28:30 -05:00
Mike Reeves 4ef38f8d04 Add EPS and RAID status collection for telegraf 2021-01-25 19:14:46 -05:00
Josh Patterson 049daa6701 Merge pull request #2725 from Security-Onion-Solutions/automation/ssh_prompts
Automation/ssh prompts
2021-01-25 17:21:55 -05:00
Jason Ertel df21b28d5c Update copyright year 2021-01-25 17:11:42 -05:00
Jason Ertel b0c74cf38c Add import automation files for other platforms 2021-01-25 16:46:52 -05:00
Jason Ertel ae233b5757 Update AMI automation files for distributed install 2021-01-25 15:53:25 -05:00
Jason Ertel 8ec0b95f02 Rename AMI automation files for consistency with other files 2021-01-25 15:53:25 -05:00
m0duspwnens 2f8b5afe3e Merge remote-tracking branch 'remotes/origin/issue/2722' into automation/ssh_prompts 2021-01-25 15:23:39 -05:00
m0duspwnens 944817732b grep for the scrip to be running https://github.com/Security-Onion-Solutions/securityonion/issues/2722 2021-01-25 15:22:04 -05:00
m0duspwnens 17a1189e42 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-25 15:20:46 -05:00
m0duspwnens 50345628f0 Merge remote-tracking branch 'remotes/origin/dev' into automation/ssh_prompts 2021-01-25 13:48:08 -05:00
m0duspwnens 7dcca6f364 change when we detect os and wait_for_apt when installing sshpass 2021-01-25 13:47:51 -05:00
Mike Reeves 6e9bdde9e2 Merge pull request #2721 from Security-Onion-Solutions/sosappliance
Fix function for appliances
2021-01-25 13:26:28 -05:00
Mike Reeves 2e32b53158 Fix function for appliances 2021-01-25 13:20:46 -05:00
m0duspwnens e1f7c090f3 detect os and cloud sooner 2021-01-25 10:25:41 -05:00
William Wernert 2a4eac74c4 Merge pull request #2681 from Masaya-A/logrotate-fix
Log Rotation Fix (common-rotate)
2021-01-25 10:14:39 -05:00
m0duspwnens fe09479dde Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into dev 2021-01-25 09:55:52 -05:00
Masaya-A 995d618ff5 Add cron.absent to remove old cron job if present 2021-01-25 15:45:33 +09:00
Mike Reeves 560e510b44 Merge pull request #2715 from Security-Onion-Solutions/sosappliance
Sosappliance
2021-01-24 12:06:18 -05:00
Mike Reeves b4c8b439a0 Detect if this is an SOS appliance 2021-01-24 12:02:34 -05:00
Mike Reeves 85e2a14f1e Put functions in correct order 2021-01-24 11:52:45 -05:00
Jason Ertel 6f14f27ca0 Add automation files for distributed network variations 2021-01-23 11:04:07 -05:00
William Wernert 59a4b148bc Merge branch 'dev' into logrotate-fix 2021-01-22 15:20:55 -05:00
William Wernert 2159914742 Merge pull request #2708 from Security-Onion-Solutions/bugfix/telegraf-zombie-procs
Bugfix/telegraf zombie procs
2021-01-22 15:20:09 -05:00
Jason Ertel 47d69bbc9e Move from quay.io to ghcr.io 2021-01-22 13:53:49 -05:00
William Wernert 7273c8a066 [fix] Also rotate stenographer log as per #2681 2021-01-22 12:46:21 -05:00
William Wernert 4079f8a8e8 [fix] Telegraf doesn't clean up zombie processes, use init flag to fix this 2021-01-22 12:23:09 -05:00
William Wernert f1781b1fde [fix] Set timeout for scripts (15s, 3x default 5s) 2021-01-22 12:15:29 -05:00
Jason Ertel 537f7529f8 Increase Kibana wait from 3 minutes to 15 minutes due to the longer init time needed for Kibana to start (because of the recent ES changes) 2021-01-22 10:09:15 -05:00
Masaya-A 249651edc7 Delete suri-rotate.conf 2021-01-22 10:08:23 +09:00
Masaya-A e0bbc8cc51 Delete surirotate 2021-01-22 10:08:07 +09:00
Masaya-A f156106e57 Update salt/common/files/log-rotate.conf
Co-authored-by: William Wernert <william.wernert@gmail.com>
2021-01-22 09:29:08 +09:00
Masaya-A bcdf826204 Update init.sls 2021-01-22 09:26:52 +09:00
Mike Reeves 636687ac59 Merge pull request #2702 from Security-Onion-Solutions/essecurity
SSL with Elastic Basic license. Remove features option.
2021-01-21 13:57:28 -05:00
Mike Reeves 9408d62c65 Remove features 2021-01-21 13:55:53 -05:00