Commit Graph

11509 Commits

Author SHA1 Message Date
weslambert
2d7ce41a70 Remove reference to 'so-curator-cluster-warm' script since it has been removed 2023-03-07 16:16:55 -05:00
weslambert
a738c7c36d Merge pull request #9907 from Security-Onion-Solutions/fix/curator_global_delete_action
Add the new Security Onion index format to the global delete action file for Curator
2023-03-07 16:03:28 -05:00
Josh Brower
6f82cf3807 Merge pull request #9906 from Security-Onion-Solutions/2.4/setupfix
Remove EA install from manager highstates
2023-03-07 15:33:34 -05:00
weslambert
e93c052d34 Add the new index format to the global delete action file for Curator 2023-03-07 15:21:53 -05:00
Josh Brower
fd2312a2ac Remove EA install from manager highstates 2023-03-07 15:13:35 -05:00
weslambert
8c79d7e40d Merge pull request #9905 from Security-Onion-Solutions/fix/curator_new_action_files
Add New Curator Action Files
2023-03-07 12:44:25 -05:00
Wes
f50639d2d2 Fix import and syslog actions 2023-03-07 17:41:48 +00:00
Wes
26c9813276 Add keys for new Curator actions to defaults.yaml 2023-03-07 17:29:07 +00:00
Wes
88d98af243 Add new Curator action files to Curator close and delete scripts 2023-03-07 17:21:03 +00:00
Wes
d636546871 Add new Curator action files 2023-03-07 17:15:25 +00:00
weslambert
f0b7a75ae8 Merge pull request #9904 from Security-Onion-Solutions/fix/curator_clean_up_action_files
Clean Up Old Curator Action Files
2023-03-07 11:52:28 -05:00
Wes
073054b447 Remove 'so-curator-cluster-warm' and remove unncessary Curator default values 2023-03-07 16:21:55 +00:00
Wes
df94e830c5 Remove unnecessary Curator action files 2023-03-07 16:15:41 +00:00
weslambert
deda0fa279 Merge pull request #9902 from Security-Onion-Solutions/fix/so-status_curator
Add Curator to so-status Output
2023-03-07 10:17:14 -05:00
Wes
086b3bf528 Add Curator to so-status output 2023-03-07 15:14:53 +00:00
Josh Brower
3eb839bd21 Merge pull request #9897 from Security-Onion-Solutions/2.4/dev-fleet
Fleet - setup ES output for all Managers
2023-03-06 15:54:03 -05:00
Josh Brower
a6db2d4502 Fleet - setup ES output for all Managers 2023-03-06 15:50:09 -05:00
Josh Brower
8fae826a3a Merge pull request #9890 from Security-Onion-Solutions/2.4/fixosquerylink
Fixup osquery SO Hunt link
2023-03-06 07:25:00 -05:00
Doug Burks
1e31966d8d Merge pull request #9893 from Security-Onion-Solutions/2.4/enable-zeek-vlan
2.4/enable zeek vlan
2023-03-06 07:20:45 -05:00
Doug Burks
a2bda07820 add VLAN dashboard 2023-03-05 15:24:11 -05:00
Doug Burks
19ab2a5a46 rename suricata vlan field to network.vlan.id 2023-03-05 05:57:52 -05:00
Josh Brower
f0db5cf657 Fixup osquery SO Hunt link 2023-03-04 11:50:01 -05:00
Doug Burks
4a2e75dd8c fix formatting 2023-03-03 17:16:45 -05:00
Doug Burks
e24296d536 add SOC Dashboards groupby for Zeek conn vlan field 2023-03-03 15:23:43 -05:00
Doug Burks
9940a36722 update Elasticsearch ingest for Zeek conn vlan field 2023-03-03 15:22:43 -05:00
Doug Burks
adb925b4d6 enable zeek vlan script 2023-03-03 12:48:42 -05:00
Mike Reeves
26dbaeb7ac Merge pull request #9882 from Security-Onion-Solutions/TOoSmOotH-patch-5
Update so-functions
2023-03-02 11:36:24 -05:00
Mike Reeves
2b0ea8eb8b Update so-functions 2023-03-02 11:34:36 -05:00
weslambert
196a6ce984 Merge pull request #9881 from Security-Onion-Solutions/fix/curator_configuration_update_8.0.x
Update Curator configuration to align with requirements for Curator 8.0.x
2023-03-02 08:51:14 -05:00
weslambert
06d1f0f913 Update Curator configuration to align with requirements for Curator 8.0.x 2023-03-02 08:46:52 -05:00
Mike Reeves
204f423051 Merge pull request #9878 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update init.sls
2023-03-01 21:37:17 -05:00
Mike Reeves
af284b9aae Update init.sls 2023-03-01 16:38:48 -05:00
Mike Reeves
2091806f1f Merge pull request #9864 from Security-Onion-Solutions/setuperrors
Fix some errors in setup
2023-03-01 09:48:20 -05:00
m0duspwnens
704365c6eb only stdout redirect 2023-03-01 09:44:48 -05:00
m0duspwnens
a79c380e2b use cmd.run to populate metrics_link 2023-03-01 09:18:58 -05:00
weslambert
a5c2c0fb20 Merge pull request #9866 from Security-Onion-Solutions/fix/soc_elasticsearch_ilm_annotations_verbiage
Various adjustments to descriptions
2023-02-28 16:46:53 -05:00
m0duspwnens
c4e1ec781e apply influxdb before highstate in setup 2023-02-28 16:31:35 -05:00
weslambert
134caa7f58 Various adjustments to descriptions 2023-02-28 16:31:16 -05:00
m0duspwnens
8772dcaa10 ensure influxdb is running 2023-02-28 15:57:54 -05:00
Josh Brower
96467f0bd8 Merge pull request #9865 from Security-Onion-Solutions/2.4/fleet-esoutput
Move Output to ES
2023-02-28 15:20:46 -05:00
m0duspwnens
052e0dea2e create and manage metrics_link in a file for soc 2023-02-28 14:47:44 -05:00
Mike Reeves
ff495cb20e fix formatting issue 2023-02-28 10:41:44 -05:00
Mike Reeves
34f5dbeba0 Merge branch 'setuperrors' of https://github.com/Security-Onion-Solutions/securityonion into setuperrors 2023-02-28 09:41:10 -05:00
Mike Reeves
c00d671098 backup influx dir 2023-02-28 09:40:57 -05:00
Josh Patterson
cbcd3c9dd9 Update defaults.map.jinja 2023-02-27 15:39:03 -05:00
Josh Patterson
8632606a24 Update defaults.map.jinja 2023-02-27 15:37:35 -05:00
Mike Reeves
1692970789 back out verify changes since underlying errors should be fixed 2023-02-27 15:22:08 -05:00
Josh Patterson
8d33f01936 Update defaults.map.jinja 2023-02-27 15:01:31 -05:00
Mike Reeves
aa7b05d639 small cleanup 2023-02-27 14:12:26 -05:00
Mike Reeves
9967e91825 remove mysql check 2023-02-27 13:42:11 -05:00