4518 Commits

Author	SHA1	Message	Date
m0duspwnens	2e277bf487	change container to abesent of pcap is disabled	2021-07-26 10:08:59 -04:00
doug	3d3593a1a9	FIX: Suricata dns.response.code needs to be renamed to dns.response.code_name #4770	2021-07-22 09:50:21 -04:00
Jason Ertel	257062e20c	Update release notes link to match top right menu for airgap	2021-07-22 09:48:34 -04:00
doug	fa9d7afb46	FIX: Airgap link to Release Notes #4685	2021-07-22 09:42:37 -04:00
Jason Ertel	ad8c12afa5	Upgrade ES to 7.13.4	2021-07-21 15:07:02 -04:00
Jason Ertel	74874dfff2	Allow web pages to load blob data	2021-07-21 14:59:33 -04:00
weslambert	bde86e0383	Use http_auth instead of username/password until Curator is upgraded to next version	2021-07-19 12:42:46 -04:00
Mike Reeves	741e825ab9	Remove old airgap scripts	2021-07-13 15:44:26 -04:00
weslambert	7cdb967810	Only route to FB module pipeline if filebeat in metadata	2021-07-13 11:36:18 -04:00
Josh Patterson	12b7fd3ab4	whitespace	2021-07-07 14:48:07 -04:00
Josh Patterson	c32b5b5429	whitespace	2021-07-07 14:47:16 -04:00
Josh Patterson	ea2a748dba	whitespace	2021-07-07 14:44:44 -04:00
Josh Patterson	c1d7d8c55a	add new line	2021-07-07 14:43:20 -04:00
Josh Patterson	a3c58d8445	remove heavy soup	2021-07-07 14:42:38 -04:00
Josh Patterson	cfc5c2aef6	do ; instead of &&	2021-07-07 14:32:57 -04:00
Josh Patterson	313260a0c5	add heavy action in soup for ssl redis, es, ls, fb	2021-07-07 14:22:45 -04:00
m0duspwnens	5eab57e500	remove soup control of heavy	2021-07-07 13:58:52 -04:00
m0duspwnens	98fb5109d7	tell heavys to update ssl and restart containers for HEAVYNODE_SSL_LOGSTASH_REDIS_PIPELINES hotfix	2021-07-07 12:05:38 -04:00
m0duspwnens	9c2ead16cc	common name changes, allow cert to be managed regardless of expire date for heavy node	2021-07-07 10:22:37 -04:00
m0duspwnens	0627ca2fc2	use heavynode hostname for certs if heavynode. changes to logstash pipeline for redis if heavynode	2021-07-06 15:32:39 -04:00
weslambert	ce0b064972	Add conditional for heavynode for redis and elasticsearch	2021-07-06 14:21:29 -04:00
weslambert	2f3f04e4ca	Change from nodename to host	2021-07-06 14:18:39 -04:00
weslambert	2e91f27336	Add conditional for heavynode	2021-07-06 14:17:49 -04:00
weslambert	10b1829830	Add conditional for heavynode	2021-07-06 14:16:34 -04:00
weslambert	4946f32d88	Add extra_hosts entry for local instance when running as heavy node	2021-07-06 14:14:58 -04:00
Mike Reeves	22aa695508	Update telegraf.conf	2021-07-02 09:47:31 -04:00
Mike Reeves	693f455862	ECS hotfix	2021-07-02 08:55:49 -04:00
m0duspwnens	21c9c7b8f4	only render main script if a manager type node	2021-07-01 07:56:45 -04:00
m0duspwnens	108fb12612	s/Migrating/Downsampling	2021-06-30 17:53:09 -04:00
m0duspwnens	eb8a030966	reset vars in jinja loop	2021-06-30 17:41:38 -04:00
m0duspwnens	9235bb35a1	fix jinja whatspace and add defaults	2021-06-30 17:30:33 -04:00
m0duspwnens	7b281abf0c	migrate script now goes through each day and measurement	2021-06-30 17:21:18 -04:00
Mike Reeves	26ff50f85c	Merge pull request #4659 from Security-Onion-Solutions/kilo	2021-06-30 16:34:16 -04:00
William Wernert	4dbb869952	Fix typo	2021-06-30 16:21:09 -04:00
Jason Ertel	f3041a8d7e	Ensure all curl's to Kibana are properly sessioned and/or authenticated depending on elastic auth toggle	2021-06-30 16:09:08 -04:00
William Wernert	4109cdec53	Refactor so-docker-prune to prevent exceptions when removing images ... * Prune containers at beginning of script so stopped containers using old images are removed * Add force=True arg to remove() call to ensure an image is still deleted on the off chance a container is still using that image * Add exception handling to continue removing containers instead of exiting if the script fails to remove a container	2021-06-30 15:35:01 -04:00
weslambert	fcbacd473d	Add ELK, redis	2021-06-30 09:34:56 -04:00
weslambert	06d77d9972	Update so-common-template.json	2021-06-30 09:31:32 -04:00
m0duspwnens	ada729087d	add script to drop autogen, rename so-influxdb-migrate to so-influxdb-downsample	2021-06-30 08:14:52 -04:00
m0duspwnens	aa47a72656	source common to require root	2021-06-30 07:25:51 -04:00
m0duspwnens	149f837223	Merge remote-tracking branch 'remotes/origin/dev' into issue/4609	2021-06-29 22:20:28 -04:00
m0duspwnens	37d6529ae0	fix load panel for manager graf	2021-06-29 22:18:17 -04:00
m0duspwnens	8d3ae65e04	fix load graf standalone	2021-06-29 22:13:51 -04:00
m0duspwnens	649e539ca6	add trends to sensor dash	2021-06-29 22:08:29 -04:00
m0duspwnens	45e90750a0	add trends for searchnode grafs	2021-06-29 21:37:20 -04:00
Mike Reeves	ce2a8917a6	Merge pull request #4635 from Security-Onion-Solutions/kilo	2021-06-29 21:21:55 -04:00
m0duspwnens	b22cd2d27c	managersearch dash with trends	2021-06-29 21:07:02 -04:00
m0duspwnens	813ef7d81a	new eval dashboard with trends	2021-06-29 20:23:27 -04:00
m0duspwnens	88275cd968	remove trend zeek capture loss, turn on line and points for capture loss standalone graf	2021-06-29 19:50:53 -04:00
m0duspwnens	3a47563b27	remove queries manager dashboard	2021-06-29 19:26:40 -04:00