CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-26 19:03:35 +01:00
Code Issues Packages Projects Releases Wiki Activity
5,876 Commits 19 Branches 120 Tags
343e9f8b2c416d9cfcb5be29cdeeac73eb5574fc
Commit Graph

3345 Commits

Author SHA1 Message Date
William Wernert
f7d02763e8 [fix] Move FEATURESCHECK var assignment, fix indentation 2020-12-15 13:07:21 -05:00
William Wernert
f70d828aa6 [fix] Create array correctly 2020-12-15 13:04:09 -05:00
Jason Ertel
3da7a26e88 Remove jinja whitespace trimming to avoid syntax error in bash 2020-12-15 12:37:05 -05:00
Mike Reeves
922534a5da Merge pull request #2352 from Security-Onion-Solutions/soup2320 
SOUP Features
 2020-12-15 12:07:19 -05:00
TOoSmOotH
80a61d3316 SOUP Features 2020-12-15 12:06:30 -05:00
Mike Reeves
bf1f00d2fe Merge pull request #2348 from Security-Onion-Solutions/soup2320 
SOUP Changes
 2020-12-14 21:19:45 -05:00
TOoSmOotH
cbd59ed86a SOUP Changes 2020-12-14 20:46:31 -05:00
Josh Brower
efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch 
Swap localhost for 127.0.0.1
 2020-12-14 15:49:58 -05:00
William Wernert
3e2a9cc884 Merge branch 'dev' into experimental 2020-12-14 12:32:53 -05:00
Doug Burks
7a314b5935 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 11:35:29 -05:00
Doug Burks
61ae187d03 revert previous commit #2321 2020-12-12 10:12:23 -05:00
Josh Brower
73d23e6d17 Revert "Initial support - Playbook Overrides" 
This reverts commit 8915e49288.
 2020-12-12 10:07:30 -05:00
Josh Brower
8faf80a03b Revert "Playbook db updates" 
This reverts commit 35be785f7a.
 2020-12-12 10:07:23 -05:00
Mike Reeves
b5ed973abd Merge pull request #2138 from OmerTirosh/OmerTirosh-fix-win.eventlog 
Fix Error: SO elasticsearch ingest failed to convert 'winlog.event_data.SubjectUserName' to 'user.name'
 2020-12-12 10:00:27 -05:00
Doug Burks
85aac4ad75 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 09:22:08 -05:00
Josh Brower
66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
m0duspwnens
09b3a4a0dd merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:35:06 -05:00
m0duspwnens
b8e8510dd2 merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:26:32 -05:00
Jason Ertel
eb735c7289 Replace duplicate random generator with common function 2020-12-11 13:22:13 -05:00
Josh Patterson
2f2867804a Merge pull request #2318 from Security-Onion-Solutions/issue/1175 
pillarize grafana and allow for grafana alerts to be created
 2020-12-11 12:36:06 -05:00
m0duspwnens
d877fac786 add null for max graph value https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:28:43 -05:00
m0duspwnens
c88a1a943d update search and sensor node dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:21:16 -05:00
m0duspwnens
e3335a3106 update managersearch dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:00:02 -05:00
m0duspwnens
0a77a28e06 guage to graph cor cpu on manager and eval https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:51:42 -05:00
m0duspwnens
6eb64227ae update manager dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:44:21 -05:00
m0duspwnens
5a95181b2b update eval version 1 https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:36:19 -05:00
m0duspwnens
2fc151d923 update eval dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:34:08 -05:00
m0duspwnens
33fde42dbc dont show legend on pcap retention panel 2020-12-11 10:42:30 -05:00
m0duspwnens
e0e38ac37f update standlone dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 10:39:25 -05:00
Jason Ertel
0915ae30e4 Add timestamps to so-yara-update output 2020-12-11 10:08:10 -05:00
Jason Ertel
14f28e38be Ensure so-yara-updata script is logging to a file during cron job execution 2020-12-11 10:04:43 -05:00
m0duspwnens
fbcc62d5c5 Merge remote-tracking branch 'remotes/origin/dev' into issue/1175 2020-12-10 15:17:45 -05:00
m0duspwnens
733f5a5021 allowUiUpdates to dashboards to allow for alert creation on stock dashboards issue/1175 2020-12-10 15:17:22 -05:00
Mike Reeves
cd6a945a24 Merge pull request #2298 from Security-Onion-Solutions/escluster 
Traditional ES Clustering Support
 2020-12-10 12:07:17 -05:00
m0duspwnens
4ee944448f remove $Interval template var since alerts cant be crated when it is used https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-10 12:05:57 -05:00
TOoSmOotH
42833b2086 Make non clustered node attributes 2020-12-10 11:14:32 -05:00
TOoSmOotH
d9d7f49b96 Adjust elasticsearch.yml 2020-12-10 11:09:38 -05:00
Wes Lambert
45faa7fda4 Add ability to supply an arg, for example overriding 15 min limit 2020-12-10 14:30:29 +00:00
Wes Lambert
f689722559 Add initial suricata.ftp_data pipeline 2020-12-10 14:14:50 +00:00
m0duspwnens
ea1bd63f60 makedirs and place readme file for grafana https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 16:59:38 -05:00
TOoSmOotH
af15f0eb38 remove ml node.role 2020-12-09 16:23:38 -05:00
m0duspwnens
8db79ae852 comment out some defaults file https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 16:01:09 -05:00
m0duspwnens
e05da4efc2 remove odl grafana.ini file https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 15:53:01 -05:00
Mike Reeves
30e69bf7b2 Merge branch 'escluster' into newescluster 2020-12-09 15:23:49 -05:00
TOoSmOotH
0a48f7d5dc Simplify logic 2020-12-09 15:22:09 -05:00
m0duspwnens
c320efe7e4 fix whitespace https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 14:33:19 -05:00
m0duspwnens
617ed2a7c2 add a place to place files referenced in the config https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 14:06:54 -05:00
m0duspwnens
c5c053d24a change to header 2020-12-09 11:59:06 -05:00
m0duspwnens
75ea648cf9 change to file.managed https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 11:57:28 -05:00
TOoSmOotH
e983322a18 Fix elastic if statement 2020-12-09 11:31:22 -05:00