Commit Graph

5919 Commits

Author SHA1 Message Date
William Wernert 46d2342c8b Merge branch 'bugfix/reinstall' into experimental 2020-12-02 14:45:46 -05:00
Mike Reeves d004263b71 Add Elastic Clustering 2020-12-02 14:33:22 -05:00
William Wernert fc7fe23590 [fix] Correct signal naming 2020-12-02 14:06:50 -05:00
William Wernert cc5d54764a [fix] sed masks command return code, remove 2020-12-02 13:54:02 -05:00
William Wernert 8fe43d6d56 [fix] Print WARNING instead of ERROR if minion is not responding initially 2020-12-02 13:35:57 -05:00
Mike Reeves 69ae4577f5 Merge pull request #2174 from Security-Onion-Solutions/escluster
Escluster
2020-12-02 13:23:08 -05:00
William Wernert 467f9923b0 [refactor] Add trap to handle script exits, change what files are deleted in /etc/salt/ 2020-12-02 13:19:34 -05:00
weslambert c819729cd6 Don't use max_files or time_to_live for shutdown params 2020-12-02 13:17:19 -05:00
Josh Patterson 54d8dcdbb0 Merge pull request #2173 from Security-Onion-Solutions/issue/2079
Issue/2079
2020-12-02 11:46:29 -05:00
William Wernert 2d4fe58299 [fix] Also kill currently running jobs 2020-12-01 21:43:38 -05:00
William Wernert 4b5b936abb [fix] echo -> return 2020-12-01 21:40:41 -05:00
William Wernert 2d6feea5c5 [fix] Syntax fixes 2020-12-01 21:21:32 -05:00
William Wernert 38028a543a [feat] Add timeout for salt services to stop during reinstall init 2020-12-01 21:18:24 -05:00
Jason Ertel b7bc8db3b2 Modify PCAP quick action to work off of network community ID; Add new Correlate quick action 2020-12-01 17:37:44 -05:00
Jason Ertel 81b86bf7f2 Switch PCAP quick actions to support alternative lookup link when a single event ID is not available 2020-12-01 16:04:50 -05:00
m0duspwnens ff6951cd95 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/2079 2020-12-01 15:38:15 -05:00
m0duspwnens 141d7a35c9 if true cluster enabled allow search nodes to talk to each other https://github.com/Security-Onion-Solutions/securityonion/issues/2079 2020-12-01 15:38:09 -05:00
William Wernert c2e7e42509 [fix] Don't SIGKILL salt services + disable highstate schedule 2020-12-01 15:36:05 -05:00
weslambert 0e8f547087 Merge pull request #2160 from Security-Onion-Solutions/fix/strelka_mmbot
Remove ScanMmbot
2020-12-01 11:26:14 -05:00
weslambert 9517cb2a58 Remove ScanMmbot 2020-12-01 11:25:51 -05:00
Josh Brower c303cdff09 Merge pull request #2150 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet Fixes - mysql race condition
2020-11-30 18:06:30 -05:00
Josh Brower e7a927188b Fleet Fixes - mysql race condition 2020-11-30 17:28:11 -05:00
William Wernert 8a8885e14f [feat] Verify that main ip = mngmt ip
* Add a check to check whether the src ip in the routing table is also the ip assigned to the management nic
2020-11-30 16:53:02 -05:00
Josh Brower 8e9458ca84 Merge pull request #2149 from Security-Onion-Solutions/bugfix/fleet-standalone
Fix Fleet setup errors
2020-11-30 12:06:36 -05:00
Josh Brower 5d2acf4011 Fix Fleet setup errors 2020-11-30 12:06:02 -05:00
William Wernert 8964444eeb [fix] Correct count print in mysql_conn 2020-11-30 11:32:43 -05:00
William Wernert ec81e8565f [fix] Add safety logic to retry var in mysql_conn 2020-11-30 11:32:28 -05:00
William Wernert 040b435278 [refactor] Fail mysql_conn if the mainint has > 1 ip address 2020-11-30 11:10:50 -05:00
Josh Brower 704f024441 Merge pull request #2146 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet standalone - fix event
2020-11-30 10:33:05 -05:00
Josh Brower 65d8005629 Fleet standalone - fix event 2020-11-30 10:32:39 -05:00
Josh Brower 7fddf99648 Merge pull request #2128 from Security-Onion-Solutions/bugfix/fleet-standalone
Fix Fleet setup errors
2020-11-27 13:59:19 -05:00
Josh Brower f52c30bff5 Fix Fleet setup errors 2020-11-27 13:58:41 -05:00
Josh Brower 19a33c5c2a Merge pull request #2126 from Security-Onion-Solutions/bugfix/fleet-standalone
Bugfix/fleet standalone
2020-11-27 11:45:25 -05:00
Josh Brower 19b36f0468 Fleet standalone redirect fix 2020-11-27 11:43:51 -05:00
Josh Brower 95a664e12a Merge pull request #2103 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet standalone fix
2020-11-25 14:09:27 -05:00
Josh Brower 38afd67108 Fleet standalone fix 2020-11-25 14:08:30 -05:00
Jason Ertel 979f171828 Add missing comma to sensoroni.json 2020-11-25 12:29:45 -05:00
Jason Ertel 8f9081618f Add role to sensoroni.json file 2020-11-25 11:11:46 -05:00
Jason Ertel 7fb264b4fe Use double quotes around agent key to ensure interpolation 2020-11-24 17:17:50 -05:00
Jason Ertel d20560385f Remove /nsm/wazuh/etc subdir state since confirmed the Wazuh docker container itself 2020-11-24 16:50:46 -05:00
Jason Ertel e1147398cc Ensure /nsm/wazuh is owned by ossec 2020-11-24 15:48:46 -05:00
Jason Ertel 8864428a00 Ensure setup output is redirected to logfile 2020-11-24 15:45:40 -05:00
Jason Ertel ea9bbfd1aa Improve wazuh agent registration with retry logic to wait for manager to become ready 2020-11-24 13:53:20 -05:00
weslambert 0c4ee94472 Merge pull request #2077 from Security-Onion-Solutions/fix/thehive_upgrade_conf
Fix/thehive upgrade conf
2020-11-24 11:52:51 -05:00
weslambert 39bf60feb7 Add digit 2020-11-24 11:52:20 -05:00
weslambert 35653d2e66 Changes for ES7 2020-11-24 11:51:19 -05:00
weslambert eb2364b926 Changes for ES7 2020-11-24 11:49:08 -05:00
Josh Patterson 9bb485cdc9 Merge pull request #2074 from Security-Onion-Solutions/issue/2040
Issue/2040
2020-11-24 11:45:08 -05:00
m0duspwnens fe2662cab8 dont enable steno pillar on import node https://github.com/Security-Onion-Solutions/securityonion/issues/2040 2020-11-24 11:42:03 -05:00
m0duspwnens 995a377432 squigly comma if steno enabled https://github.com/Security-Onion-Solutions/securityonion/issues/2040 2020-11-24 11:31:41 -05:00