10863 Commits

Author	SHA1	Message	Date
reyesj2	348f9dcaec	prevent multiple script instances using file lock	2025-09-05 10:01:24 -05:00
reyesj2	915b9e7bd7	use logrotate	2025-09-05 09:22:44 -05:00
reyesj2	dfec29d18e	custom kquery	2025-09-04 15:37:28 -05:00
reyesj2	1a32a0897c	Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/ea-alerter	2025-09-02 17:11:21 -05:00
reyesj2	e26310d172	elastic agent offline alerter ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2025-09-02 17:00:03 -05:00
Corey Ogburn	df0b484b45	More Descriptive Description ... Include instructions for how to add local lookups and a help link.	2025-09-02 15:07:13 -06:00
Corey Ogburn	2181cddf49	Move EnableReverseLookup ... Move EnableReverseLookup and it's annotation from ClientParams to ServerConfig.	2025-09-02 14:09:55 -06:00
Jorge Reyes	a2b6968cef	Merge pull request #14975 from Security-Onion-Solutions/reyesj2/es8186 ... ES 8.18.6 upgrade	2025-09-02 10:14:33 -05:00
Mike Reeves	19362fe5e5	Update so-combine-bond	2025-08-29 11:06:25 -04:00
Josh Patterson	a7a81e9825	always manage script, only run it if bond0 exists	2025-08-29 11:05:42 -04:00
Josh Patterson	f51cd008f2	only manage bond script if bond0 exists	2025-08-29 10:04:56 -04:00
reyesj2	a5675a79fe	es 8.18.6 pipeline upd	2025-08-28 19:45:17 -05:00
reyesj2	1ea7b3c09f	es 8.18.6	2025-08-28 18:27:56 -05:00
Jorge Reyes	d9127a288f	Merge pull request #14957 from Security-Onion-Solutions/reyesj2-patch-6 ... enable additional fleetnode state	2025-08-28 14:19:03 -05:00
Mike Reeves	153a99a002	Merge pull request #14971 from Security-Onion-Solutions/mikebond ... and nic channel customization	2025-08-27 18:42:18 -04:00
Josh Patterson	0858160be2	support for modifying nic channels	2025-08-27 14:51:57 -04:00
Mike Reeves	ccd79c814d	Add script for bond0 channels	2025-08-27 09:53:37 -04:00
Jason Ertel	304985b61e	Merge pull request #14959 from Security-Onion-Solutions/jertel/wip ... rpt	2025-08-22 16:55:45 -04:00
Corey Ogburn	d99857002d	Improved Label ... The underlying field is called "rulesetName" but for playbook repos we're not talking about rulesets. Improved the label for user experience.	2025-08-22 13:18:22 -06:00
Corey Ogburn	2a6c74917e	Ruleset Name UiElement ... Add a missing UiElement so all the repo fields are represented in the UI.	2025-08-22 13:00:17 -06:00
Jason Ertel	1357f19e48	update wording	2025-08-22 13:25:25 -04:00
Jason Ertel	c91e9ea4e0	return to normalcy	2025-08-22 13:23:19 -04:00
Josh Patterson	65e7e56fbe	Merge pull request #14950 from Security-Onion-Solutions/180soup ... 180 soup base	2025-08-21 09:50:53 -04:00
Josh Patterson	424fdff934	180 soup base	2025-08-21 09:43:30 -04:00
reyesj2	d77556c672	pcap dir	2025-08-21 08:25:48 -05:00
reyesj2	24be2f869b	enable stig on fleet nodes	2025-08-20 12:08:50 -05:00
reyesj2	f8058a4a3a	disable showing large stig profile update in salt log	2025-08-20 12:06:54 -05:00
Jason Ertel	77273449c9	fix typo	2025-08-18 16:58:52 -04:00
Jason Ertel	46e1f1bc5c	fix typo	2025-08-18 16:12:34 -04:00
Jason Ertel	884bec7465	fix typo	2025-08-18 15:01:49 -04:00
Jason Ertel	8d3220f94b	fix salt issue	2025-08-18 14:31:01 -04:00
Jason Ertel	9cb42911dc	Merge branch '2.4/dev' into jertel/wip	2025-08-18 09:54:58 -04:00
Jason Ertel	a3cc6f025e	reports	2025-08-18 09:54:40 -04:00
reyesj2	f7a1a3a172	gui / nongui profile	2025-08-15 16:07:54 -05:00
reyesj2	292e1ad782	use chrony system default	2025-08-15 15:19:31 -05:00
reyesj2	af1fe86586	update chrony config	2025-08-15 15:16:36 -05:00
reyesj2	f09eff530e	profile upd	2025-08-14 15:17:01 -05:00
reyesj2	50b34a116a	disable rpm verify hash, salt packages are modified before install for salt bootstrap process	2025-08-14 15:02:59 -05:00
reyesj2	42874fb0d0	Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/ol9stg	2025-08-13 12:50:24 -05:00
reyesj2	a19b99268d	don't create unused zeek home directory	2025-08-12 15:44:50 -05:00
reyesj2	3c5a03d7b6	fix /nsm/pcap no group/user ownership	2025-08-12 15:35:30 -05:00
reyesj2	c1a5c2b2d1	set elasticfleet aritifact registry artifact file permissions	2025-08-12 14:39:35 -05:00
Josh Patterson	baf0f7ba95	firewall allow hypervisor for managersearch and standalone	2025-08-12 14:08:15 -04:00
Josh Patterson	c5db0a7195	more ed25519 to ecdsa	2025-08-07 15:02:45 -04:00
Josh Patterson	82894d88b6	ecdsa instead of ed25519	2025-08-07 14:40:58 -04:00
reyesj2	4a4146f515	ol9 profile update	2025-08-05 13:02:44 -05:00
Josh Patterson	453c32df0d	handle - in hypervisor hostname	2025-08-04 15:25:26 -04:00
Josh Patterson	9d96a11753	update usage	2025-08-01 08:55:38 -04:00
Josh Patterson	e9e3252bb5	nvme script move nsm if mounted	2025-08-01 08:53:45 -04:00
Josh Patterson	930c8147e7	simplify cpu and memory regex	2025-08-01 08:52:21 -04:00