reyesj2
|
8477420911
|
logstash adv config state file
|
2025-12-03 20:10:06 -06:00 |
|
reyesj2
|
877444ac29
|
cert update is a forced update
|
2025-12-02 15:16:59 -06:00 |
|
reyesj2
|
b0d9426f1b
|
automated cert update for kafka fleet output policy
|
2025-12-02 15:11:00 -06:00 |
|
reyesj2
|
18accae47e
|
annotation typo
|
2025-12-02 15:10:29 -06:00 |
|
reyesj2
|
45a8c0acd1
|
merge 2.4/dev
|
2025-12-02 11:16:08 -06:00 |
|
reyesj2
|
90638f7a43
|
Merge branch 'reyesj2/advea' into reyesj2/advilm
|
2025-11-21 14:25:28 -06:00 |
|
reyesj2
|
1fb00c8eb6
|
update so-elastic-fleet-outputs-update to use advanced output options when set, else empty "". Also trigger update_logstash_outputs() when hash of config_yaml has changed
|
2025-11-21 14:22:42 -06:00 |
|
reyesj2
|
4490ea7635
|
format EA logstash output adv config items
|
2025-11-21 14:21:17 -06:00 |
|
reyesj2
|
bce7a20d8b
|
soc configurable EA logstash output adv settings
|
2025-11-21 14:19:51 -06:00 |
|
reyesj2
|
b52dd53e29
|
advanced ilm actions
|
2025-11-19 13:24:55 -06:00 |
|
reyesj2
|
45b4b1d963
|
ingest zeek analyzer.log + update dpd dashboard with analyzer tag
|
2025-11-14 15:47:29 -06:00 |
|
Josh Patterson
|
ccb8ffd6eb
|
Update install_agent_grid.sls
|
2025-11-03 17:05:48 -05:00 |
|
reyesj2
|
5a8ea57a1b
|
move off of cmd.script with args \
https://github.com/saltstack/salt/issues/68298
|
2025-11-03 15:31:14 -06:00 |
|
reyesj2
|
2baf2478da
|
add additional elasticsearch log output in json format for elasticsearch log integration to parse
|
2025-10-14 12:47:03 -05:00 |
|
Jorge Reyes
|
23e25fa2d7
|
Merge pull request #15111 from Security-Onion-Solutions/reyesj2/es-8188
UPGRADE: ES 8.18.8
|
2025-10-07 14:03:45 -05:00 |
|
reyesj2
|
7af95317db
|
es upgrade 8.18.8 pipeline updates
|
2025-10-06 16:23:22 -05:00 |
|
reyesj2
|
9fd1b9aec1
|
make sure to pass in variables to json_string..
|
2025-10-02 16:38:47 -05:00 |
|
reyesj2
|
c8a3603577
|
update logstash fleet output policy
|
2025-10-02 14:47:38 -05:00 |
|
reyesj2
|
e9af46a8cb
|
less strict exits for fleet configuration
|
2025-09-30 14:28:42 -05:00 |
|
reyesj2
|
8e5fa9576c
|
create disabled so-manager_elasticsearch output policy first, update it then verify it is the only active output
|
2025-09-26 11:32:25 -05:00 |
|
Jorge Reyes
|
23e12811a1
|
make sure fleet-default-output is not set as either default output policy
|
2025-09-25 09:51:32 -05:00 |
|
reyesj2
|
138849d258
|
more typos
|
2025-09-18 17:33:42 -05:00 |
|
reyesj2
|
87281efc24
|
typo
|
2025-09-18 16:41:33 -05:00 |
|
reyesj2
|
878a3f8962
|
flip logic to check there aren't two default policies and fleet-default-output is disabled
|
2025-09-18 16:05:34 -05:00 |
|
reyesj2
|
336ca0dbbd
|
typos
|
2025-09-18 15:42:25 -05:00 |
|
reyesj2
|
cd5483623b
|
update import/eval fleet output config -- try to prevent corrupt dual 'default' output polices from having a successful installation
|
2025-09-18 14:33:34 -05:00 |
|
reyesj2
|
faa112eddf
|
update last so-elastic-fleet-common functions
|
2025-09-18 12:18:16 -05:00 |
|
reyesj2
|
f663f22628
|
elastic_fleet_integration_id
|
2025-09-18 10:27:54 -05:00 |
|
reyesj2
|
8b07ff453d
|
elastic_fleet_integration_policy_package_version
|
2025-09-18 10:21:07 -05:00 |
|
reyesj2
|
24a0fa3f6d
|
add fleet_api wrapper for curl retries
|
2025-09-18 10:15:57 -05:00 |
|
reyesj2
|
a5011b398d
|
add err check and retries to elastic_fleet_integration_policy_package_name and associated scripts
|
2025-09-18 09:39:56 -05:00 |
|
reyesj2
|
5b70398c0a
|
add error check & retries to elastic_fleet_integration_policy_names and associated scripts
|
2025-09-17 15:35:20 -05:00 |
|
reyesj2
|
f3aaee1e41
|
update elastic_fleet_agent_policy_ids scripts already check rc
|
2025-09-17 14:59:41 -05:00 |
|
reyesj2
|
d0e875928d
|
add error checking and retries for elastic_fleet_installed_packages & associated script
|
2025-09-17 14:59:13 -05:00 |
|
reyesj2
|
9e24d21282
|
remove unused functions from so-elastic-fleet-common
|
2025-09-17 11:41:27 -05:00 |
|
reyesj2
|
5806999f63
|
add error check & retries to elastic_fleet_bulk_package_install
|
2025-09-17 11:39:06 -05:00 |
|
reyesj2
|
063a2b3348
|
update elastic_fleet_package_version_check & elastic_fleet_package_install to add error checking + retries. Update related scripts
|
2025-09-16 21:56:53 -05:00 |
|
reyesj2
|
bcd2e95fbe
|
add error checking and retries to elastic_fleet_integration_policy_upgrade
|
2025-09-16 21:22:03 -05:00 |
|
reyesj2
|
94e8cd84e6
|
because of more aggressive exits use salt to rerun script as needed
|
2025-09-16 21:07:33 -05:00 |
|
reyesj2
|
948d72c282
|
add error check and retry to elastic_fleet_integration_update
|
2025-09-16 21:07:02 -05:00 |
|
reyesj2
|
bdeb92ab05
|
add err check and retries for elastic_fleet_integration_create
|
2025-09-16 20:30:45 -05:00 |
|
reyesj2
|
fdb5ad810a
|
add err check and retries around func elastic_fleet_policy_create
|
2025-09-16 20:10:48 -05:00 |
|
reyesj2
|
f588a80ec7
|
fix jq error when indices don't exist (seen on fresh installs when fleet hasn't ever been installed)
|
2025-09-16 10:37:26 -05:00 |
|
Jorge Reyes
|
562b7e54cb
|
Merge pull request #15031 from Security-Onion-Solutions/reyesj2/kfoutput
fix case of broken kafka output policy when new receiver is added and…
|
2025-09-15 15:33:48 -05:00 |
|
reyesj2
|
e6bcf5db6b
|
fix case of broken kafka output policy when new receiver is added and secret storage was overwritten
|
2025-09-15 13:46:02 -05:00 |
|
Jorge Reyes
|
4d24c57903
|
Merge pull request #15028 from Security-Onion-Solutions/reyesj2/ea-alerter
agent monitor template & dataset name update
|
2025-09-12 14:45:20 -05:00 |
|
reyesj2
|
0606c0a454
|
agent monitor template & dataset name update
|
2025-09-12 14:26:22 -05:00 |
|
Jorge Reyes
|
a54cd004d6
|
Merge pull request #15013 from Security-Onion-Solutions/reyesj2/kfoutput
update kafka output policy
|
2025-09-12 07:34:54 -05:00 |
|
reyesj2
|
a7651b2734
|
lower filestream fingerprint length
|
2025-09-11 14:30:49 -05:00 |
|
reyesj2
|
890f76e45c
|
avoid delay in log ingest after a forced kafka output policy update
|
2025-09-10 20:21:11 -05:00 |
|