Mike Reeves
2ffb723bbd
Rename so-common-template.json to so-common-template.json.jinja
2021-09-14 13:58:45 -04:00
m0duspwnens
0534a2dda3
Merge remote-tracking branch 'remotes/origin/dev' into issue/1257
2021-09-13 15:04:50 -04:00
m0duspwnens
f8ab0ac8a9
config changes
2021-09-13 15:04:39 -04:00
m0duspwnens
0ae09cc630
config changes
2021-09-13 09:49:56 -04:00
Mike Reeves
332c4dda22
Merge pull request #5469 from Security-Onion-Solutions/fix/idstools-rule-clear
...
Allow so-rule-update to accept any number of args
2021-09-10 14:41:55 -04:00
William Wernert
679faddd52
Update so-rule-update to pass all args to docker exec
...
Instead of passing $1, build a string from all args and add that to the command string for the docker exec statement
2021-09-10 13:44:37 -04:00
William Wernert
0b42b19763
Update so-rule-update to source so-common
2021-09-10 13:41:58 -04:00
William Wernert
943bd3e902
Merge pull request #5468 from Security-Onion-Solutions/fix/idstools-rule-clear
...
Add `--force` flag to idstools-rulecat under so-rule-update
2021-09-10 13:17:16 -04:00
Mike Reeves
4af6a901a1
Merge pull request #5461 from Security-Onion-Solutions/truclusterrator
...
Add new hunt fields
2021-09-10 13:17:01 -04:00
William Wernert
9c310de459
Add --force flag to idstools-rulecat under so-rule-update
...
This forces idstools to pull from the url each time, which prevents it from clearing all.rules if idstools-rulecat is run twice within 15 minutes by any method (either restarting the container or running so-rule-update)
2021-09-10 13:15:09 -04:00
Mike Reeves
4f6a3269cb
Add more detail to syscollector
2021-09-10 09:59:47 -04:00
Mike Reeves
c83f119cc0
Update so-raid-status
2021-09-09 10:59:35 -04:00
Mike Reeves
5d235e932c
Fix Raid Status for cloud
2021-09-09 10:46:28 -04:00
m0duspwnens
93f2cd75a4
add the jinja template
2021-09-09 10:19:46 -04:00
m0duspwnens
f06ab8b77d
testing defaults.yaml
2021-09-09 08:55:36 -04:00
weslambert
b8600be0f1
Incude server.publicBaseUrl
2021-09-08 12:12:09 -04:00
Jason Ertel
19a02baa7c
Merge pull request #5425 from Security-Onion-Solutions/kilo
...
Auth enhancements
2021-09-07 13:10:36 -04:00
Jason Ertel
3c59579f99
Add maintenance privilege for analysts to refresh indices
2021-09-07 13:03:30 -04:00
Jason Ertel
72cff7ec7a
Merge branch 'dev' into kilo
2021-09-07 10:49:08 -04:00
Mike Reeves
e3900606dc
Enable index sorting by default but allow it to be disabled
2021-09-04 10:42:18 -04:00
Rob Waight
b7591093cf
Add index sorting to so-common-template.json
...
Add index sorting to so-common-template.json
2021-09-04 09:45:03 -04:00
Jason Ertel
94ea1f856b
Add auditor role; update analyst role with correct syntax
2021-09-03 15:59:48 -04:00
Jason Ertel
fbbb7f4e85
Add auditor role; update analyst role with correct syntax
2021-09-03 15:54:05 -04:00
Mike Reeves
9fb28709d5
Add maxfiles to the steno config
2021-09-03 10:47:00 -04:00
Jason Ertel
649f339934
Correct typo
2021-09-02 20:30:48 -04:00
Jason Ertel
f659079542
Consolidate password validation messaging
2021-09-02 19:12:32 -04:00
Jason Ertel
ce70380f0f
resolve so-user errors from recent auth changes
2021-09-02 17:59:33 -04:00
Jason Ertel
c4d402d8b4
Ensure role file exists before ES state is run
2021-09-02 15:45:47 -04:00
Mike Reeves
9f5dafd560
More Event Fields
2021-09-02 13:48:18 -04:00
Mike Reeves
1cee603ee4
Squid event fields
2021-09-02 13:24:04 -04:00
William Wernert
a14854d56d
Merge pull request #5383 from Security-Onion-Solutions/feature/soup-y
...
Add logic to check unattended flag when checking OS updates
2021-09-02 11:50:45 -04:00
Mike Reeves
2bf471054b
Cloudtrail Event Fields
2021-09-02 11:46:18 -04:00
William Wernert
56894b9581
Add logic to check unattended flag when checking if updates are available
2021-09-02 11:15:32 -04:00
Jason Ertel
10126bb7ef
Auth enhancements
2021-09-02 09:44:57 -04:00
Jason Ertel
84ecc3cba7
Merge branch 'dev' into kilo
2021-09-02 07:09:36 -04:00
Jason Ertel
0ad3d826eb
Invalid password message should also mention that dollar signs are not allowed
2021-09-02 07:07:36 -04:00
William Wernert
d785dafe2f
Merge pull request #5374 from Security-Onion-Solutions/feature/soup-y
...
Add unattended soup flag, and iso location argument for air gap
2021-09-01 16:48:55 -04:00
Mike Reeves
556bad6925
Add eventfields for new default logs
2021-09-01 15:13:43 -04:00
William Wernert
446821e9fd
Use exit code 0 when printing error message before exiting soup
2021-09-01 15:11:18 -04:00
William Wernert
576c893eb3
Exit on missing file argument
2021-09-01 15:08:53 -04:00
Mike Reeves
324e6b12e2
Add jinja template
2021-09-01 09:32:32 -04:00
Mike Reeves
007b15979a
Non Cluster honor closed indices values
2021-09-01 09:25:14 -04:00
Mike Reeves
527a793e94
Only enable curator on Manager in true cluster
2021-08-31 16:59:41 -04:00
Mike Reeves
61ebedc0e9
Only enable curator on Manager in true cluster
2021-08-31 16:56:08 -04:00
Mike Reeves
e09aa4e5d4
Only enable curator on Manager in true cluster
2021-08-31 16:35:19 -04:00
Mike Reeves
e7b04b862f
Only enable curator on Manager in true cluster
2021-08-31 16:21:48 -04:00
Mike Reeves
62edfd0b7f
Only enable curator on Manager in true cluster
2021-08-31 16:20:42 -04:00
Mike Reeves
958575c22a
Only enable curator on Manager in true cluster
2021-08-31 16:17:55 -04:00
Mike Reeves
0c8e11dc9f
Only enable curator on Manager in true cluster
2021-08-31 16:13:05 -04:00
Mike Reeves
5b9ef3bc0d
Only enable curator on Manager in true cluster
2021-08-31 15:55:44 -04:00
