Josh Patterson
|
285d73d526
|
enable/disable soqemussh. allow for pw to be set
|
2025-04-18 14:07:32 -04:00 |
|
Josh Patterson
|
0bcb6040c9
|
recreate sool9 if user-data or meta-data cloud-init changes
|
2025-04-18 14:02:17 -04:00 |
|
Josh Patterson
|
07ef3d632c
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-15 08:08:12 -04:00 |
|
Jorge Reyes
|
7f5cde9a1c
|
Merge pull request #14540 from Security-Onion-Solutions/reyesj2/fix-14417
FIX: Add log.origin.file.line to base templates
|
2025-04-14 15:46:54 -05:00 |
|
reyesj2
|
58df566c79
|
add mapping for metadata.kafka.timestamp
|
2025-04-14 14:30:40 -05:00 |
|
reyesj2
|
395b81ffc6
|
FIX: Add log.origin.file.line to base templates #14417
|
2025-04-14 14:30:00 -05:00 |
|
Jorge Reyes
|
e3d5829b89
|
Merge pull request #14539 from Security-Onion-Solutions/reyesj2-patch-1
fix kafka delayed initial connection with remote clients on multi-broker deployments
|
2025-04-14 13:06:20 -05:00 |
|
reyesj2
|
df31c349b0
|
update annotations
|
2025-04-14 12:32:31 -05:00 |
|
reyesj2
|
759d5f76cd
|
fix kafka external access slow to establish initial connection
|
2025-04-14 12:32:22 -05:00 |
|
Josh Brower
|
240484deea
|
Merge pull request #14537 from Security-Onion-Solutions/2.4/idstoolsfix
Run so-rule-update when it changes
|
2025-04-14 11:20:32 -04:00 |
|
Josh Brower
|
ceabb673e0
|
Refactor for so-rule-update
|
2025-04-14 11:08:35 -04:00 |
|
Jorge Reyes
|
f1070992a8
|
Merge pull request #14538 from Security-Onion-Solutions/reyesj2-patch-5
|
2025-04-14 08:41:35 -05:00 |
|
reyesj2
|
c0f9c344bb
|
set logstash log rollover when log size exceeds 1G
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-04-14 08:13:27 -05:00 |
|
Josh Patterson
|
21bb325157
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-14 08:22:42 -04:00 |
|
Josh Brower
|
00029e6f83
|
Run so-rule-update when it changes
|
2025-04-14 08:04:46 -04:00 |
|
reyesj2
|
9459bf8a27
|
allow larger kafka log files before forcing rollover
|
2025-04-11 14:41:32 -05:00 |
|
Josh Patterson
|
96e99fc442
|
Merge pull request #14535 from Security-Onion-Solutions/mineimp
ensure the highstate retry runs only once
|
2025-04-11 14:43:17 -04:00 |
|
Josh Patterson
|
4b14bf90a3
|
ensure the highstate retry runs only once
|
2025-04-11 14:28:18 -04:00 |
|
reyesj2
|
2cb002668f
|
restrict count of kafka log files
|
2025-04-11 12:32:49 -05:00 |
|
Jorge Reyes
|
c11a10638b
|
Merge pull request #14528 from Security-Onion-Solutions/reyesj2-patch-4
external access to kafka topics via user/pass auth
|
2025-04-11 10:52:40 -05:00 |
|
reyesj2
|
6fe240de45
|
remove whitespaces then check for empty string as password
|
2025-04-11 10:42:45 -05:00 |
|
reyesj2
|
ecd7da540a
|
skip user entries that don't have password configured
|
2025-04-11 10:21:46 -05:00 |
|
Josh Brower
|
2a43a6f37e
|
Merge pull request #14532 from Security-Onion-Solutions/2.4/saltlogs
Fix comma
|
2025-04-11 07:51:35 -04:00 |
|
Josh Brower
|
4cdfb6e3eb
|
Fix comma
|
2025-04-11 07:49:35 -04:00 |
|
Josh Brower
|
1edd13523c
|
Merge pull request #14530 from Security-Onion-Solutions/fix/detections
Change timeout to 1s
|
2025-04-11 07:47:38 -04:00 |
|
Josh Brower
|
4217e23272
|
Merge pull request #14531 from Security-Onion-Solutions/2.4/saltlogs
Extract log level and drop INFO level
|
2025-04-11 07:47:25 -04:00 |
|
Josh Brower
|
f94c81a041
|
Extract log level and drop INFO level
|
2025-04-11 07:45:12 -04:00 |
|
Josh Brower
|
4c3518385b
|
Change timeout to 1s
|
2025-04-11 07:37:09 -04:00 |
|
reyesj2
|
1429226667
|
nest default value for external_access under kafka:config
|
2025-04-10 15:55:17 -05:00 |
|
Josh Patterson
|
888ab162bd
|
update mine_functions and mine after mainint switch to br0. ensure br0 has ip before updating mine
|
2025-04-10 15:04:08 -04:00 |
|
reyesj2
|
5498673fc3
|
group events in 10s and remove deprecated output configuration option
|
2025-04-10 09:46:37 -05:00 |
|
reyesj2
|
96c56297ce
|
external access via user/pass
|
2025-04-09 22:08:13 -05:00 |
|
Josh Patterson
|
8ab38956d1
|
change from error to warning
|
2025-04-09 11:19:55 -04:00 |
|
Josh Patterson
|
0f120f7500
|
ensure manager is in /etc/hosts
|
2025-04-09 11:19:18 -04:00 |
|
Josh Patterson
|
f6a0e62853
|
include managerhype in orch. run hypervisor state before libvirt states
|
2025-04-08 09:50:26 -04:00 |
|
Josh Patterson
|
cc0e91aa96
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-07 08:52:50 -04:00 |
|
Josh Patterson
|
bf9f92b04e
|
remove soc_hypervisor.yaml
|
2025-04-04 13:47:54 -04:00 |
|
Jason Ertel
|
270958ddfc
|
Merge pull request #14502 from Security-Onion-Solutions/jertel/wip
support background actions via config UI
|
2025-04-04 11:27:36 -04:00 |
|
Jason Ertel
|
b99bb0b004
|
support options field on actions
|
2025-04-04 11:19:30 -04:00 |
|
Josh Patterson
|
8f3664f26c
|
need to sync
|
2025-04-04 09:00:22 -04:00 |
|
Josh Patterson
|
445afca6ee
|
use vrt
|
2025-04-03 13:44:13 -04:00 |
|
Josh Patterson
|
3083e3bc63
|
sync runners and create soqemussh user ssh keypair for manager and managerhype
|
2025-04-03 13:42:02 -04:00 |
|
Jason Ertel
|
9c455badb9
|
support background actions via config UI
|
2025-04-03 13:08:44 -04:00 |
|
Josh Patterson
|
9e16c03d25
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-03 08:47:54 -04:00 |
|
Josh Patterson
|
275489b8a3
|
Merge pull request #14499 from Security-Onion-Solutions/strelkaFix
Add missing scanners and fix forcedType for Strelka SOC UI annotations. Restart Strelka containers on config change.
|
2025-04-02 11:56:44 -04:00 |
|
Josh Patterson
|
cd6deae0a7
|
add missing strelka backend scanners to SOC UI annotation file
|
2025-04-02 11:20:12 -04:00 |
|
Josh Patterson
|
0b8a7f5b67
|
fix strelka annotations. restart strelka containers on config change
|
2025-04-02 10:10:34 -04:00 |
|
Mike Reeves
|
3c342bb90d
|
Merge pull request #14486 from Security-Onion-Solutions/TOoSmOotH-patch-3
Update soup
|
2025-04-01 09:53:32 -04:00 |
|
Jason Ertel
|
ba10228fef
|
Update soup
|
2025-04-01 09:42:10 -04:00 |
|
Mike Reeves
|
71f146d1d9
|
Update soup
|
2025-04-01 09:36:22 -04:00 |
|