Commit Graph

39 Commits

Author SHA1 Message Date
William Wernert
e41811fbd0 [fix] Typo 2021-07-13 15:14:13 -04:00
William Wernert
80525ee736 [wip] Add logscan pipeline 2021-07-08 12:29:50 -04:00
Mike Reeves
7fba904f75 Dynamix Pipelines take 1 2021-06-09 15:32:39 -04:00
Mike Reeves
33db9023eb Revert to SO taxonomy for zeek and suricata 2021-06-08 13:50:39 -04:00
Josh Brower
bba9913be1 Temp revert Fleet Live Query to Hunt 2021-03-17 08:25:25 -04:00
Josh Brower
548f67ca6f Initial support for Live Queries in Hunt 2021-03-04 18:21:13 -05:00
Mike Reeves
9708b02387 update pipeline 2020-08-08 18:32:36 -04:00
Mike Reeves
e7225349a6 Ability to toggle between redis and minio 2020-08-05 22:56:41 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
weslambert
7d432091e2 Remove LS syslog port binding 2020-07-29 08:35:07 -04:00
m0duspwnens
57bf23d83c move templates from logstash to elasticsearch 2020-07-14 16:07:46 -04:00
m0duspwnens
13af4cacb0 merge with dev and resolve conflicts 2020-07-10 16:27:10 -04:00
Mike Reeves
46d572fa8c Fix Filebeat spacing 2020-07-10 15:51:12 -04:00
Mike Reeves
5eb33d5ac7 Logstash Import and Template Assignment 2020-07-10 13:53:55 -04:00
m0duspwnens
24b8f81e38 merge with dev and resolve conflicts 2020-07-10 12:20:14 -04:00
Mike Reeves
bbef7955b2 Update eval.sls 2020-07-10 11:36:46 -04:00
Mike Reeves
3706aa76d8 Add jinja extension 2020-07-10 10:35:31 -04:00
Mike Reeves
9a7035326d Update Logstash pillar 2020-07-09 17:09:20 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Josh Brower
4e4eeedb41 Initial support - external beats 2020-06-04 22:41:35 -04:00
Wes Lambert
8cac30728b update Logstash config 2020-06-02 17:36:36 +00:00
Mike Reeves
e270b18d94 Remove special character in logstash pillar 2020-04-02 14:25:58 -04:00
weslambert
edbe512d82 Bro to Zeek 2020-04-01 15:18:30 -04:00
Wes Lambert
22e7777d67 update search sls 2020-04-01 19:12:07 +00:00
weslambert
9f58081ce8 Typo 2020-04-01 14:57:47 -04:00
weslambert
d0ad7e7ef9 Update config for search pipeline 2020-04-01 14:57:32 -04:00
Wes Lambert
81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00
Wes Lambert
84e54a8fae update Eval pillar 2020-03-11 12:09:34 +00:00
weslambert
4a4c378327 Add bro template 2020-03-09 09:18:14 -04:00
Wes Lambert
b75bd35bc2 remove Strelka from LS PL 2020-03-03 21:19:54 +00:00
Wes Lambert
3fbb81f6d1 cleanup default config files 2020-03-03 18:03:45 +00:00
Wes Lambert
880c5abe6b prune default loaded configs for Eval Mode 2020-03-02 19:58:46 +00:00
m0duspwnens
0c4973ad77 pillarize logstash config,parsers,templates and docker port bindings 2020-02-25 17:44:32 -05:00
m0duspwnens
2b34bdece9 logstash cleanup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326 2020-02-20 16:47:40 -05:00
m0duspwnens
6a7580404d directory cleanup - logstash pipeline rework 2020-02-19 13:08:14 -05:00
m0duspwnens
f042cb074f add helix pipeline pillar 2020-02-05 11:10:12 -05:00
m0duspwnens
88967c2512 evalfix 2020-01-30 17:36:38 -05:00
m0duspwnens
bd5b597aed heavynode 2020-01-29 12:56:25 -05:00
m0duspwnens
a39edad3f6 changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124 2020-01-21 16:39:42 -05:00