143 Commits

Author	SHA1	Message	Date
Mike Reeves	09165daab8	Several Suricata things	2021-07-21 09:10:33 -04:00
m0duspwnens	ebea9a7198	remove space	2021-06-16 08:07:28 -04:00
m0duspwnens	ad9441bb60	prevent suricata state from running on manager and managersearch https://github.com/Security-Onion-Solutions/securityonion/issues/2977	2021-06-16 08:06:26 -04:00
Mike Reeves	0a2d44131b	Merge pull request #3939 from Security-Onion-Solutions/soupmkr ... send suricata compress to dev/null	2021-04-21 18:00:03 -04:00
Mike Reeves	c337be8f4f	send suricata compress to dev/null	2021-04-21 17:27:52 -04:00
bryant-treacle	f14df24ddc	Update threading.map.jinja	2021-04-21 11:49:29 -04:00
m0duspwnens	e87fb013dc	prevent salt warning - The 'file_mode' argument will be ignored. Please use 'mode' instead to set file permissions.	2021-03-19 16:21:18 -04:00
m0duspwnens	ec179f8e9b	https://github.com/Security-Onion-Solutions/securityonion/issues/3515	2021-03-17 18:44:25 -04:00
doug	b4ad7e7359	FIX: Improve Suricata DHCP logging and parsing #3397	2021-03-11 11:01:51 -05:00
Jason Ertel	7222f1faa5	fix merge issue	2021-02-20 16:41:12 -05:00
Mike Reeves	b4b449aa14	Pull in Suricata changes	2021-02-19 11:01:15 -05:00
Josh Patterson	79e7b1da4d	Merge pull request #3021 from Security-Onion-Solutions/issue/2989 ... change suricata clean cron to run once a day	2021-02-18 14:07:40 -05:00
m0duspwnens	03487c2a31	change suricata clean cron to run once a day	2021-02-18 14:06:45 -05:00
Josh Patterson	0ab9577863	Merge pull request #3018 from Security-Onion-Solutions/all_rules_dont_show_changes ... dont show changes since file can be large	2021-02-18 12:23:54 -05:00
m0duspwnens	bf100a2310	dont show changes since file can be large	2021-02-18 12:23:22 -05:00
m0duspwnens	95df18c545	limit eve logs and gz files based on days	2021-02-18 10:45:20 -05:00
m0duspwnens	a4d5f58256	fix surilogcompress	2021-02-18 10:33:47 -05:00
m0duspwnens	74ca4487de	ensure at least 2 eve files are kept https://github.com/Security-Onion-Solutions/securityonion/issues/2989	2021-02-18 09:51:40 -05:00
m0duspwnens	4b07d5e457	add identifier to eve clean cron	2021-02-18 09:39:54 -05:00
m0duspwnens	041d193f2d	fix brackets	2021-02-18 09:37:37 -05:00
m0duspwnens	0bef8b6662	limit number of eve.json files for suricata https://github.com/Security-Onion-Solutions/securityonion/issues/2989	2021-02-18 09:26:59 -05:00
Masaya-A	995d618ff5	Add cron.absent to remove old cron job if present	2021-01-25 15:45:33 +09:00
William Wernert	59a4b148bc	Merge branch 'dev' into logrotate-fix	2021-01-22 15:20:55 -05:00
Masaya-A	249651edc7	Delete suri-rotate.conf	2021-01-22 10:08:23 +09:00
Masaya-A	e0bbc8cc51	Delete surirotate	2021-01-22 10:08:07 +09:00
Masaya-A	bcdf826204	Update init.sls	2021-01-22 09:26:52 +09:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
Mike Reeves	1154b533d6	Remove ERSPAN so log doesn't show a warning	2021-01-05 13:56:56 -05:00
m0duspwnens	96b72d46be	show steno,zeek,suricata as disabled in so-status on import node	2020-12-16 12:01:48 -05:00
William Wernert	c7c3d004ca	[fix] More helix -> helixsensor	2020-12-15 14:01:19 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
weslambert	71a260a000	Match max-pending-packets size	2020-11-02 08:38:45 -05:00
m0duspwnens	34dfc809c7	handle thread count for suricata and default max-pending-packets to 5000 - https://github.com/Security-Onion-Solutions/securityonion/issues/1460	2020-10-06 13:57:50 -04:00
m0duspwnens	63884b73e1	enable suricata threshold-file and point to proper file - https://github.com/Security-Onion-Solutions/securityonion/issues/1441	2020-10-05 12:10:52 -04:00
Mike Reeves	0a0e00866c	Upgrade Fun	2020-09-14 14:50:22 -04:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	01c9f7b2ae	merge with dev and resolve conflicts	2020-09-09 16:23:36 -04:00
weslambert	8db8dcb71a	Change HOME_NET and EXTERNAL_NET defaults	2020-09-03 08:15:14 -04:00
m0duspwnens	a229ae82ce	only allow state to run if it is in top for the node	2020-09-02 16:15:52 -04:00
Mike Reeves	a97ca94354	Rotate suri stats log hourly	2020-08-23 16:08:17 -04:00
Mike Reeves	ebd8105cb5	Rotate suri stats log hourly	2020-08-23 16:03:37 -04:00
Jason Ertel	9c6cc81f70	Remove improper suricata logging filter - this re-enables logging output for the suricata process itself	2020-08-21 12:44:28 -04:00
Mike Reeves	2b88f22eb2	Make HUP for rotate more reliable	2020-08-20 17:57:36 -04:00
Mike Reeves	b7da768dc7	add logrotate	2020-08-20 16:46:32 -04:00
m0duspwnens	35027e32b3	dont constantly run steno or suricata containers for import node	2020-08-14 14:43:37 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
m0duspwnens	e3efaee864	change reference from bro to zeek	2020-07-17 14:41:44 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
m0duspwnens	5ca3ecf4bd	fix reference to master grain	2020-07-09 15:42:39 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00