482 Commits

Author	SHA1	Message	Date
Mike Reeves	2fd344822d	Add additional roles for highlander	2021-10-05 10:40:40 -04:00
Mike Reeves	a3e0fb127a	Merge pull request #5069 from datlife/datlife/asn-annotation ... Add ASN annotation for IP	2021-10-05 06:50:31 -04:00
Dat	9569e73bd0	Added ASN annotation for IP	2021-10-04 12:41:20 -07:00
Josh Patterson	47cd1ddc0a	Merge pull request #5580 from Security-Onion-Solutions/issue/1257 ... Issue/1257 - Pillarize ES	2021-09-20 09:31:03 -04:00
m0duspwnens	aed73511e4	file cleanup, comment cleanup	2021-09-20 09:24:03 -04:00
m0duspwnens	109c83d8c3	move custom es cluster name pillar location	2021-09-17 15:29:41 -04:00
m0duspwnens	b877aa44bc	update dict	2021-09-17 14:10:45 -04:00
m0duspwnens	d0c87cd317	allow for pillar override of defaults	2021-09-17 12:11:12 -04:00
m0duspwnens	0d074dafd4	add missing defaults	2021-09-17 09:52:50 -04:00
m0duspwnens	5b77dc109f	Merge remote-tracking branch 'remotes/origin/dev' into issue/1257	2021-09-16 16:54:23 -04:00
m0duspwnens	3ce48acadd	change cluster_settings to config	2021-09-16 16:44:31 -04:00
m0duspwnens	5526a2bc3a	reduce defaults.yaml	2021-09-16 15:32:08 -04:00
m0duspwnens	889d235c45	no box type more manager in true cluster	2021-09-16 09:15:24 -04:00
Jason Ertel	b81d38e392	Merge branch 'dev' into kilo	2021-09-16 07:44:35 -04:00
Jason Ertel	82da0041a4	Add limited roles with restricted visibility	2021-09-16 07:44:15 -04:00
m0duspwnens	782b01e76f	seed_hosts to list	2021-09-15 17:07:52 -04:00
m0duspwnens	3bf9685df8	fix seed_hosts append	2021-09-15 17:00:16 -04:00
m0duspwnens	4cf91f6c86	fix dict update	2021-09-15 15:51:00 -04:00
m0duspwnens	a43b37f234	fix dict update	2021-09-15 15:49:18 -04:00
m0duspwnens	e0dc62b6e9	fix dict update	2021-09-15 15:43:47 -04:00
m0duspwnens	c213834316	update the dict	2021-09-15 15:24:40 -04:00
Josh Brower	c06668c68e	Merge pull request #5527 from Security-Onion-Solutions/feature/so-import-evtx ... Feature/so import evtx	2021-09-15 14:17:15 -04:00
Josh Brower	a75238bc3f	so-import-evtx - fix ingest formatting	2021-09-15 14:13:16 -04:00
m0duspwnens	1614b70853	update cluster name if true cluster	2021-09-15 13:45:43 -04:00
m0duspwnens	1a03853a7c	fix extend	2021-09-15 13:38:29 -04:00
m0duspwnens	e0faa4c75b	Merge branch 'issue/1257' of https://github.com/Security-Onion-Solutions/securityonion into issue/1257	2021-09-15 13:09:35 -04:00
m0duspwnens	e3e2e1d851	logic for truecluster to map file	2021-09-15 13:09:04 -04:00
m0duspwnens	551dba955c	set roles empty list	2021-09-15 09:20:33 -04:00
Mike Reeves	2ffb723bbd	Rename so-common-template.json to so-common-template.json.jinja	2021-09-14 13:58:45 -04:00
m0duspwnens	0534a2dda3	Merge remote-tracking branch 'remotes/origin/dev' into issue/1257	2021-09-13 15:04:50 -04:00
m0duspwnens	f8ab0ac8a9	config changes	2021-09-13 15:04:39 -04:00
m0duspwnens	0ae09cc630	config changes	2021-09-13 09:49:56 -04:00
m0duspwnens	93f2cd75a4	add the jinja template	2021-09-09 10:19:46 -04:00
m0duspwnens	f06ab8b77d	testing defaults.yaml	2021-09-09 08:55:36 -04:00
Jason Ertel	19a02baa7c	Merge pull request #5425 from Security-Onion-Solutions/kilo ... Auth enhancements	2021-09-07 13:10:36 -04:00
Jason Ertel	3c59579f99	Add maintenance privilege for analysts to refresh indices	2021-09-07 13:03:30 -04:00
Jason Ertel	72cff7ec7a	Merge branch 'dev' into kilo	2021-09-07 10:49:08 -04:00
Mike Reeves	e3900606dc	Enable index sorting by default but allow it to be disabled	2021-09-04 10:42:18 -04:00
Rob Waight	b7591093cf	Add index sorting to so-common-template.json ... Add index sorting to so-common-template.json	2021-09-04 09:45:03 -04:00
Jason Ertel	94ea1f856b	Add auditor role; update analyst role with correct syntax	2021-09-03 15:59:48 -04:00
Jason Ertel	fbbb7f4e85	Add auditor role; update analyst role with correct syntax	2021-09-03 15:54:05 -04:00
Jason Ertel	10126bb7ef	Auth enhancements	2021-09-02 09:44:57 -04:00
Mike Reeves	a27263435a	Add Templates for all filebeat modules	2021-08-27 14:41:04 -04:00
Mike Reeves	f8cdf5bca3	Add Templates for all filebeat modules	2021-08-27 14:39:02 -04:00
Josh Brower	7b93f355e2	so-import-evtx - timestamp extraction	2021-08-25 15:17:19 -04:00
m0duspwnens	a27569f20b	remove source when contents provided	2021-08-25 12:32:17 -04:00
m0duspwnens	fd1e632386	cleanup yaml	2021-08-25 12:08:43 -04:00
m0duspwnens	0681d29bb0	starting es pillarization	2021-08-25 10:23:06 -04:00
Mike Reeves	71bbb41b5f	Merge branch 'dev' into bravo	2021-08-04 10:57:10 -04:00
William Wernert	8a49039b85	Only append source.ip to logscan.source.ips if it's been created	2021-08-02 09:50:49 -04:00