2005 Commits

Author	SHA1	Message	Date
Jason Ertel	79041d091e	influx upgrade	2023-02-16 13:22:13 -05:00
Jason Ertel	a9b3594b35	merge	2023-02-15 08:06:41 -05:00
Jason Ertel	8746f55834	influx upgrade	2023-02-15 08:03:22 -05:00
Jason Ertel	1fa8294ee6	influx upgrade	2023-02-13 14:56:51 -05:00
weslambert	40d3269db3	Remove 'so-filebeat' from list of trusted containers	2023-02-13 09:58:39 -05:00
Jason Ertel	47af14c265	upgrade influx	2023-02-13 09:51:48 -05:00
Jason Ertel	e5c26032c4	influx upgrade	2023-02-10 19:37:59 -05:00
Jason Ertel	7dee2686ac	influx upgrade	2023-02-10 18:19:31 -05:00
Jason Ertel	cd27ae89cc	influx upgrade	2023-02-10 16:34:06 -05:00
Wes	1d0e09bdf7	Ensure Elastic utility scripts have the correct permissions	2023-02-10 15:26:46 +00:00
Wes	d17cf89c68	Fix Bash shebang	2023-02-10 15:01:09 +00:00
Wes	7b7461ef01	Dynamically load index management lifecycle policies based on pillar values	2023-02-10 14:59:29 +00:00
Jason Ertel	e77813a173	influx upgrade	2023-02-09 19:14:58 -05:00
Jason Ertel	0eec8b22a2	influx upgrade	2023-02-09 18:27:14 -05:00
Jason Ertel	0e50d36da6	upgrade influx	2023-02-09 16:18:04 -05:00
Jason Ertel	067b6bacd1	merge from 2.4/dev	2023-02-09 11:57:51 -05:00
Wes	ee7f299e6d	Fix typo - 'Kratos' to 'Kibana'	2023-02-09 15:56:36 +00:00
Wes	bb6fc8da19	Add policy templates for other logs	2023-02-09 15:51:58 +00:00
weslambert	b744dc0641	Add so-eval to list of modes using the Elasticsearch output for Elastic Agent and Fleet	2023-02-09 09:35:29 -05:00
weslambert	613793ad9b	Temporarily use Elasticsearch output for Standalone installations	2023-02-09 09:32:04 -05:00
Wes	b319b50fa1	Add initial ILM status script	2023-02-08 21:39:33 +00:00
Wes	1d6c03feb1	Rename initial ILM lifecycle status explanation script	2023-02-08 21:34:39 +00:00
Wes	91d24d36f9	Add initial ILM lifecycle status explanation script	2023-02-08 21:34:15 +00:00
Wes	3e31bda285	Fix typo in Elasticsearch portion of script names	2023-02-08 21:32:17 +00:00
Wes	1de3871ee9	Add initial ILM service restart script	2023-02-08 21:30:25 +00:00
Wes	03849b0659	Add initial ILM service start script	2023-02-08 21:29:38 +00:00
Wes	b38f4ca766	Add initial ILM service stop script	2023-02-08 21:29:16 +00:00
Wes	8027055086	Add initial ILM policy delete script	2023-02-08 21:09:42 +00:00
Wes	d6d01f8542	Add initial ILM policy view script	2023-02-08 21:01:02 +00:00
Wes	713e9ee215	Create initial template for ILM policy load script	2023-02-08 20:10:41 +00:00
Jason Ertel	51674b3a5b	upgrade influx	2023-02-08 13:50:32 -05:00
Jason Ertel	a1ac1785d3	upgrade influx	2023-02-08 13:40:27 -05:00
Jason Ertel	ea0c3db8e1	upgrade influxdb	2023-02-08 13:23:45 -05:00
m0duspwnens	6e45f1b6e1	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-02-03 09:55:50 -05:00
Wes	bc082dff99	Only run Zeek if it is defined as 'mdengine'	2023-02-02 16:22:42 +00:00
m0duspwnens	9eae31e488	add managersearch to allowed roles for so-firewall. fix setup error from so-firewall "Please specify a role with --role="	2023-02-02 10:03:22 -05:00
weslambert	d242050627	Disable loading of Kibana and Logstash logs for now since there are issues with the packages from the registry	2023-02-01 15:59:35 -05:00
weslambert	74eed31eec	Change Elasticsearch output name from 'so-manager_elasticsearch2' to 'so-manager_elasticsearch'	2023-01-31 12:55:03 -05:00
Wes	5472f53c9f	Remove bind mount and reference the correctly named entrypoint script	2023-01-30 21:24:30 +00:00
Wes	0156784687	Add EVTX integration policy for 'so-import-evtx'	2023-01-30 21:22:37 +00:00
Wes	cc100e50cd	Update so-import-evtx to convert EVTX to a JSON file instead of streaming to Elasticsearch	2023-01-30 21:09:58 +00:00
weslambert	8240e5b20d	Remove 'prospector.scanner' prefix from 'exclude_files' configuration	2023-01-27 16:46:43 -05:00
Doug Burks	b160d0add5	Fix typos in so-elastic-fleet-integration-policy-load	2023-01-27 15:45:58 -05:00
weslambert	68fac4488e	Fix syntax for Zeek integration policies	2023-01-27 15:27:15 -05:00
weslambert	e47f64bd04	Change event.category from 'file' to 'network'	2023-01-27 12:00:30 -05:00
weslambert	f49627cec1	Update Zeek file exclusions and add a minor output formatting change	2023-01-27 11:47:14 -05:00
weslambert	6b251a2596	Change 'pipeline' to 'import.file' so that ICS tag conditional is applied to the correct field	2023-01-27 11:30:06 -05:00
weslambert	a8d2631d75	Merge pull request #9650 from Security-Onion-Solutions/fix/elastic_agent_add_import_mode ... Elastic Agent - Import Mode	2023-01-26 11:33:20 -05:00
Wes	b381c5424e	Remove extra whitespace after 'so-elastic-agent-builder' line in 'so-image-common'	2023-01-26 16:13:23 +00:00
Wes	f1db1bc273	Ensure Kratos events are sent to a data stream instead of an index	2023-01-26 16:12:06 +00:00