1157 Commits

Author	SHA1	Message	Date
Jorge Reyes	cf95af66c6	Revert "Add support for cybereason integration"	2024-10-21 15:23:05 -04:00
reyesj2	8b11019712	Add support for cybereason integration ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-10-18 11:56:47 -04:00
reyesj2	322199358d	add support for trendmicro integration ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-10-16 16:45:46 -04:00
weslambert	aacd715379	Retry after 1 second	2024-09-25 13:07:01 -04:00
weslambert	50ae37c160	Check if running during soup	2024-09-25 08:25:20 -04:00
Wes	70c5a07913	Add back meta ad error.message	2024-09-23 21:36:40 +00:00
Wes	41112a59ec	Add back meta	2024-09-23 20:12:14 +00:00
Wes	764eb98bc2	Add custom component for ints	2024-09-17 19:43:13 +00:00
Wes	cf0d56eee7	Fix suricata alerts for opnsense and pfsense	2024-09-17 19:24:31 +00:00
Jason Ertel	cce9e162d4	remove colon to avoid yaml parsing problems	2024-09-16 15:30:14 -04:00
Jason Ertel	217bb388a0	Clarify enabled settings	2024-09-16 10:05:17 -04:00
weslambert	24504dcc87	Fix annotations typo	2024-09-12 10:54:13 -04:00
weslambert	602158aa56	Add annotations for barracuda and imperva	2024-09-11 15:52:23 -04:00
Wes	f2bb54d993	Add barracuda and imperva integrations	2024-09-11 19:41:38 +00:00
Wes	25a9fb9b5c	Add destination IP for so-system	2024-09-09 20:16:23 +00:00
m0duspwnens	5a1d61a042	ref es version	2024-09-05 08:45:44 -04:00
m0duspwnens	df14cbad44	fix calls to get_elastic_agent_vars	2024-09-04 17:43:49 -04:00
m0duspwnens	f106191e72	fix image for so-elasticsearch container	2024-09-04 16:01:24 -04:00
Josh Patterson	71f6b44c0c	Merge pull request #13607 from Security-Onion-Solutions/esver ... use Elasticsearch version for some containers	2024-09-04 13:30:07 -04:00
m0duspwnens	0af2e85f91	update annotation.	2024-09-04 10:32:11 -04:00
weslambert	a7de6993f9	Add so-system-mappings	2024-08-30 16:11:41 -04:00
weslambert	1cac2ff1d4	Merge pull request #13554 from Security-Onion-Solutions/fix/ilm_soc_logs ... FIX: Add so-soc-logs	2024-08-26 12:54:03 -04:00
weslambert	dd09f5b153	Add so-soc-logs	2024-08-26 10:32:27 -04:00
Josh Patterson	4c10282f40	add es version to annotation	2024-08-26 09:37:19 -04:00
weslambert	e96a0108c3	Add global@custom	2024-08-23 13:05:34 -04:00
Jorge Reyes	1c6f5126db	Merge pull request #13546 from Security-Onion-Solutions/reyesj2/kfano ... set kafka.id in common ingest pipeline	2024-08-23 09:50:08 -04:00
reyesj2	1ec5e3bf2a	add kafka.id to common ingest pipeline ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-08-23 09:47:21 -04:00
weslambert	d7e3e134a5	Check Elasticsearch for template	2024-08-22 10:33:13 -04:00
weslambert	2a024039bf	Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm ... Create detections.alerts ILM policy with corresponding name	2024-08-21 14:50:10 -04:00
weslambert	212cc478de	Change back to so	2024-08-21 14:39:24 -04:00
weslambert	88ea60df2a	Fix name	2024-08-21 14:38:57 -04:00
weslambert	c1b7232a88	Fix for detections-alerts	2024-08-21 14:38:29 -04:00
weslambert	4108e67178	Check for endpoint package	2024-08-21 14:22:28 -04:00
weslambert	4afac201b9	Change ILM policy name	2024-08-21 13:25:26 -04:00
m0duspwnens	cd9c9a25d3	reference elastic versions from defaults	2024-08-21 11:25:56 -04:00
m0duspwnens	3d61897522	ref es version from defaults for kibana	2024-08-21 08:51:35 -04:00
weslambert	dc197f6a5c	Add tenable settings	2024-08-15 23:06:53 -04:00
weslambert	61ab1f1ef2	Add tenable_io templates	2024-08-15 23:03:07 -04:00
weslambert	5f74b1b730	Update column number because of changes to API	2024-08-15 08:26:56 -04:00
Doug Burks	ab63d5dbdb	Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API	2024-08-15 08:01:22 -04:00
weslambert	49d2ac2b13	Change name for system component	2024-07-31 16:17:57 -04:00
Wes	9264a03dbc	Add custom system component	2024-07-31 17:03:26 +00:00
Wes	fb2a42a9af	Use custom system component	2024-07-31 17:02:45 +00:00
weslambert	bae348bef7	Change version	2024-07-30 16:44:44 -04:00
weslambert	0453f51e64	Actually ignore missing templates	2024-07-30 12:54:07 -04:00
weslambert	d833bd0d55	Elastic 8.14.3	2024-07-30 12:45:25 -04:00
weslambert	46eeb014af	Add metrics settings	2024-07-30 12:39:50 -04:00
weslambert	c60b14e2e7	Merge branch '2.4/dev' into foxtrot	2024-07-30 08:52:48 -04:00
Corey Ogburn	20f915f649	so-detection refresh_interval => 1s ... Speeds up the refresh_interval so bulk indexing a single rule does not wait 30s.	2024-07-25 12:53:04 -06:00
Wes	c55fa6dc6a	Fix pattern for pipelines	2024-07-23 17:48:32 +00:00