Commit Graph

3367 Commits

Author SHA1 Message Date
weslambert
9de1a25703 Merge pull request #789 from Security-Onion-Solutions/fix/filebeat_init
Fix filebeat init
2020-05-28 12:11:39 -04:00
weslambert
d2263db0ff Update init.sls 2020-05-28 12:11:08 -04:00
m0duspwnens
4f15de8b77 refresh salt fileserver if suricata rule symlink is created 2020-05-28 12:00:22 -04:00
Josh Brower
e53e891bd6 Fleet reactor - Typo fix 2020-05-28 11:36:38 -04:00
Jason Ertel
6c4946f4e2 Provide option to skip reboot after setup completes 2020-05-28 10:20:44 -04:00
weslambert
c775e583dd Merge pull request #788 from Security-Onion-Solutions/feature/filebeat-syslog-fw
allow syslog
2020-05-28 09:58:15 -04:00
Wes Lambert
b7d7747f65 allow syslog 2020-05-28 13:56:02 +00:00
Mike Reeves
2b4cfe2b02 Merge pull request #786 from Security-Onion-Solutions/feature/suri5
Feature/suri5
2020-05-28 09:41:41 -04:00
Mike Reeves
8304d91b0b Merge branch 'dev' into feature/suri5 2020-05-28 09:41:28 -04:00
m0duspwnens
091cc8b789 fix how local salt and pillar dirs are created - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-28 08:57:07 -04:00
weslambert
3883c8bfe0 Merge pull request #784 from Security-Onion-Solutions/feature/filebeat-syslog
Feature/filebeat syslog
2020-05-28 08:39:11 -04:00
Wes Lambert
d2b93d531e Basic syslog config 2020-05-28 12:36:29 +00:00
Wes Lambert
5afc05feb2 Update FB init for syslog 2020-05-28 12:35:22 +00:00
Wes Lambert
b9bdca509e update Filebeat config for syslog 2020-05-28 12:33:41 +00:00
Doug Burks
f3efafc9ca combine two notice queries into one query with multiple groupby 2020-05-28 08:01:33 -04:00
Doug Burks
60cc3e9675 remove address from DHCP leases query 2020-05-28 07:50:52 -04:00
Jason Ertel
2a21d7403f Open firewall from all networks for automated testing 2020-05-28 00:47:46 -04:00
Jason Ertel
a75301cd0e Ensure IP is available to child process executing so-allow 2020-05-27 22:00:58 -04:00
Jason Ertel
1e5d5397a4 Support multiple command line options for setup, along with dynamic values per option 2020-05-27 19:42:48 -04:00
m0duspwnens
8b83799253 create local dirs sooner - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 18:16:02 -04:00
m0duspwnens
63e0a1e8a2 create local salt and pillar dirs - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 17:18:17 -04:00
m0duspwnens
59cc927878 Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-27 15:56:38 -04:00
William Wernert
3712eb0acb [fix] Redirect so-allow output to log 2020-05-27 15:49:41 -04:00
weslambert
04800277c2 Merge pull request #783 from Security-Onion-Solutions/fix/hive_rename_bug
Hive to TheHive
2020-05-27 15:44:22 -04:00
weslambert
6a935b5452 Hive to TheHive 2020-05-27 15:43:41 -04:00
Josh Brower
11c641fd1b Initial support - integrated Fleet setup 2020-05-27 15:34:14 -04:00
m0duspwnens
6e5aa0f71b Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-27 15:08:11 -04:00
m0duspwnens
16c6b2b202 dont allow addtotab to run grafana and utility states if it is initial setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 15:07:49 -04:00
m0duspwnens
12a6da928f create /opt/so/saltstack/local/salt/suricata - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 15:00:11 -04:00
m0duspwnens
d018648bc0 create addtotab templates sooner in setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 14:53:40 -04:00
William Wernert
769f5674eb [fix] Always call set_default_log_size 2020-05-27 14:08:27 -04:00
m0duspwnens
40f04ef6d0 merge with dev and fix conflicts 2020-05-27 13:54:08 -04:00
m0duspwnens
b197869a23 remove logic for if states should run or not - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 13:46:30 -04:00
weslambert
9595d63c01 Merge pull request #782 from Security-Onion-Solutions/feature/thehive-start-stop-restart
Add Hive/ES/Cortex scripts
2020-05-27 13:46:18 -04:00
m0duspwnens
21f1b423f3 move where in the process addtotab template and data directory are created - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 13:43:55 -04:00
Wes Lambert
b80eb5f73b Add Hive/ES/Cortex scripts 2020-05-27 17:43:17 +00:00
William Wernert
66c65490b9 Merge pull request #781 from Security-Onion-Solutions/feature/setup-allow
[feat] Add flag to run so-allow automatically post-setup
2020-05-27 13:26:27 -04:00
William Wernert
1952246c85 [feat] Add flag to run so-allow automatically post-setup 2020-05-27 13:23:37 -04:00
weslambert
f07d6dfb30 Merge pull request #780 from Security-Onion-Solutions/fix/thehive_path
Rename Hive to TheHive in several places
2020-05-27 13:22:57 -04:00
Wes Lambert
b26f6826dd Rename Hive to TheHive in several places 2020-05-27 17:17:55 +00:00
weslambert
58f4cce4f3 Merge pull request #779 from Security-Onion-Solutions/fix/suricata_log_path
Fix/suricata log path
2020-05-27 13:03:10 -04:00
Wes Lambert
d56bc4c167 fix path 2020-05-27 17:01:05 +00:00
Wes Lambert
3684cdf1c6 Update FB and LS 2020-05-27 17:00:09 +00:00
Wes Lambert
e78a3f3278 update Suricata config 2020-05-27 16:59:26 +00:00
Wes Lambert
b7a0f79038 Update Suricata init 2020-05-27 16:58:31 +00:00
m0duspwnens
23e9ee46b8 Merge remote-tracking branch 'remotes/origin/dev' into issue/749 2020-05-27 12:30:40 -04:00
m0duspwnens
693000afa8 remove addtotab templates and move surirulelink - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-27 12:30:12 -04:00
m0duspwnens
f35c59e6ce apply firewall state before we addtotab 2020-05-27 12:22:21 -04:00
Jason Ertel
9cc2614cc8 Automated setup will now output progress data to sosetup.log 2020-05-27 11:47:22 -04:00
William Wernert
dde66a664c Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into dev 2020-05-27 10:11:57 -04:00