Commit Graph

149 Commits

Author SHA1 Message Date
Mike Reeves 2d97dfc8a1 Add customizable ulimit settings for all Docker containers
Add ulimits as a configurable advanced setting for every container,
allowing customization through the web UI. Move hardcoded ulimits
from elasticsearch and zeek into defaults.yaml and fix elasticsearch
ulimits that were incorrectly nested under the environment key.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 15:10:42 -04:00
Josh Patterson 7bf63b822d replace placeholder files with .gitkeep to keep empty directories 2026-03-17 11:40:49 -04:00
reyesj2 e3a4f0873e update expected version for elastalert state 2025-12-17 06:53:08 -06:00
Jason Ertel 217bb388a0 Clarify enabled settings 2024-09-16 10:05:17 -04:00
Jason Ertel cf47508185 notification updates 2024-08-22 09:02:32 -04:00
Jason Ertel 8af3158ea7 fix elastalert settings 2024-05-21 18:28:21 -04:00
Jason Ertel d57cc9627f exclude false positives related to detections 2024-05-21 13:31:50 -04:00
Jason Ertel d315b95d77 elastalert settings 2024-05-21 07:15:19 -04:00
Jason Ertel b7a4f20c61 elastalert settings 2024-05-20 20:11:30 -04:00
Jason Ertel 02b4d37c11 elastalert settings 2024-05-20 20:00:31 -04:00
Jason Ertel f8ce039065 elastalert settings 2024-05-20 19:58:12 -04:00
Jason Ertel e2d0b8f4c7 elastalert settings 2024-05-20 19:38:36 -04:00
Jason Ertel 8a3061fe3e elastalert settings 2024-05-20 19:36:06 -04:00
Jason Ertel c594168b65 elastalert settings 2024-05-20 19:05:43 -04:00
Jason Ertel 6b2219b7f2 elastalert settings 2024-05-20 18:52:37 -04:00
Jason Ertel 1c4d36760a add support for custom alerters 2024-05-17 14:49:39 -04:00
weslambert 26b5a39912 Change index to detections.alerts 2024-05-13 12:59:17 -04:00
DefensiveDepth f2c3c928fc Sigma pivot fix and cleanup 2024-04-29 08:49:05 -04:00
Josh Brower 5a72c558cb Tag at top level 2023-07-11 08:35:47 -04:00
Josh Brower a6e907f76c Tag Playbook Alerts 2023-07-11 08:03:15 -04:00
weslambert 96b60fa39a Restore original URL syntax, but use data stream 2023-06-06 20:53:05 -04:00
weslambert f172a74fbc Remove EQL setting 2023-06-06 20:51:29 -04:00
weslambert c4be56ec7b Update host syntax 2023-06-06 20:51:03 -04:00
Wes 905bc564fc Change data stream name 2023-06-05 21:18:47 +00:00
Wes f6f387428f Update Playbook alerter to write to a data stream 2023-06-05 21:17:10 +00:00
Mike Reeves cace817c79 Merge branch '2.4/dev' of https://github.com/Security-Onion-Solutions/securityonion into airgaps 2023-05-24 08:43:03 -04:00
weslambert 00bd93c026 Update 'url' to use 'es_hosts' 2023-05-19 17:14:13 -04:00
weslambert 1ddf45bbbe Change Elastalert writeback index name from 'elastalert_status' to 'elastalert' 2023-05-19 12:39:27 -04:00
Mike Reeves 5315c51197 Allow additional docker parameters 2023-05-18 16:52:38 -04:00
Mike Reeves c0dc05f26a Allow additional docker parameters 2023-05-18 16:39:42 -04:00
Mike Reeves 0fd9fb9294 Allow additional docker parameters 2023-05-18 15:19:09 -04:00
Wes d3c7ea4805 Add EQL option 2023-05-18 16:55:26 +00:00
Wes 82c3d78672 Change Elasticsearch host syntax 2023-05-18 16:52:27 +00:00
m0duspwnens 9049f9cf03 enabled/disable elastalert via web ui 2023-05-08 15:56:26 -04:00
Mike Reeves 7595072e85 Fix some files 2023-05-02 12:15:05 -04:00
Mike Reeves 2d4f4791e0 Move files out of common 2023-05-01 15:21:31 -04:00
Mike Reeves 3d7f2bc691 Fix annotations and file locations 2023-04-27 13:23:53 -04:00
Mike Reeves 148b0b1c4c use hostnames please 2023-02-23 11:11:29 -05:00
Mike Reeves 95f254dc63 Change elastalert ip 2023-02-23 09:37:20 -05:00
Mike Reeves dc2fed5b04 Change elastalert ip 2023-02-23 09:34:16 -05:00
Mike Reeves 0ec0983d7b Chane Elastalert to use hosntame 2023-02-23 08:57:30 -05:00
m0duspwnens a37f0fd0c0 rename sosbridge to sobridge 2023-02-03 10:07:07 -05:00
m0duspwnens ac157432de include docker 2023-01-09 14:58:36 -05:00
m0duspwnens ec5c565cec put elastalert on sosbridge 2023-01-09 14:49:33 -05:00
m0duspwnens b526532ab6 use global vars in states 2022-10-11 11:57:15 -04:00
doug fee5a7bea9 initial quick OCD pass 2022-09-23 16:29:55 -04:00
Mike Reeves 85339d7cb1 Add helpLinks to everything 2022-09-20 15:43:34 -04:00
Mike Reeves 064b64f68a Add Grafana annotation 2022-09-13 14:00:04 -04:00
Mike Reeves de047cea8e Add Grafana annotation 2022-09-13 13:56:37 -04:00
Mike Reeves 3de4e56db9 Fix ES merge 2022-09-10 19:25:01 -04:00