DefensiveDepth
|
b7ac599a42
|
set to empty
|
2024-06-14 13:21:36 -04:00 |
|
DefensiveDepth
|
8363877c66
|
move to custom rules
|
2024-06-14 12:41:44 -04:00 |
|
DefensiveDepth
|
4bcb4b5b9c
|
removed unneeded import
|
2024-06-14 09:32:34 -04:00 |
|
DefensiveDepth
|
68302e14b9
|
add to defaults and tweaks
|
2024-06-14 09:28:23 -04:00 |
|
DefensiveDepth
|
c1abc7a7f1
|
Update description
|
2024-06-14 08:51:34 -04:00 |
|
DefensiveDepth
|
484717d57d
|
initial support for custom suricata urls and local rulesets
|
2024-06-14 08:42:10 -04:00 |
|
Jorge Reyes
|
b91c608fcf
|
Merge pull request #13204 from Security-Onion-Solutions/kaffix
Only comment out so-kafka from so-status when it exists & only run en…
|
2024-06-13 15:54:50 -04:00 |
|
reyesj2
|
8f8ece2b34
|
Only comment out so-kafka from so-status when it exists & only run ensure_default_pipeline when Kafka is configured
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-13 15:50:34 -04:00 |
|
Jorge Reyes
|
9b5c1c01e9
|
Merge pull request #13200 from Security-Onion-Solutions/kafka/fix
|
2024-06-13 12:26:57 -04:00 |
|
reyesj2
|
816a1d446e
|
Generate kafka-logstash cert on standalone,manager,managersearch in addition to searchnodes.
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-13 12:18:13 -04:00 |
|
reyesj2
|
19bfd5beca
|
fix kafka nodeid assignment to increment correctly
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-13 12:16:39 -04:00 |
|
Jorge Reyes
|
9ac7e051b3
|
Merge pull request #13190 from Security-Onion-Solutions/reyesj2/kafka
Initial Kafka support
|
2024-06-13 09:42:59 -04:00 |
|
reyesj2
|
80b1d51f76
|
wrong location for global.pipeline check
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-13 08:50:53 -04:00 |
|
Doug Burks
|
6340ebb36d
|
Merge pull request #13197 from Security-Onion-Solutions/dougburks-patch-1
Update DOWNLOAD_AND_VERIFY_ISO.md
|
2024-06-12 16:49:21 -04:00 |
|
Doug Burks
|
70721afa51
|
Update DOWNLOAD_AND_VERIFY_ISO.md
|
2024-06-12 16:47:26 -04:00 |
|
reyesj2
|
9c31622598
|
telegraft should only include jolokia config when Kafka is set as the global.pipeline
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 15:42:00 -04:00 |
|
reyesj2
|
f372b0907b
|
Use kafka:password for kafka certs
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 15:41:10 -04:00 |
|
coreyogburn
|
fac96e0b08
|
Merge pull request #13183 from Security-Onion-Solutions/cogburn/cleanup-config
Fix unnecessary escaping
|
2024-06-12 11:57:31 -06:00 |
|
reyesj2
|
2bc53f9868
|
Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka
|
2024-06-12 12:36:58 -04:00 |
|
reyesj2
|
e8106befe9
|
Append '-securityonion' to all Security Onion related Kafka topics. Adjust logstash to ingest all topics ending in '-securityonion' to avoid having to manually list topic names
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 12:05:16 -04:00 |
|
reyesj2
|
83412b813f
|
Renamed Kafka pillar
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 11:19:25 -04:00 |
|
reyesj2
|
b56d497543
|
Revert a so-setup change. Kafka is not an installable option
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 11:17:06 -04:00 |
|
reyesj2
|
dd40962288
|
Revert a whiptail menu change. Kafka is not an install option
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 11:07:23 -04:00 |
|
reyesj2
|
b7eebad2a5
|
Update Kafka self reset & add initial Kafka wrapper scripts to build out
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-12 11:01:40 -04:00 |
|
m0duspwnens
|
8f8698fd02
|
Merge remote-tracking branch 'origin/2.4/dev' into issue/13073
|
2024-06-12 10:50:18 -04:00 |
|
Josh Patterson
|
092f716f12
|
Merge pull request #13189 from Security-Onion-Solutions/soupmsgq
remove this \n
|
2024-06-12 10:41:49 -04:00 |
|
m0duspwnens
|
c38f48c7f2
|
remove this \n
|
2024-06-12 10:34:32 -04:00 |
|
m0duspwnens
|
98837bc379
|
this method does not cause soup to fail
|
2024-06-12 09:11:02 -04:00 |
|
m0duspwnens
|
0f243bb6ec
|
Merge remote-tracking branch 'origin/2.4/dev' into issue/13073
|
2024-06-11 16:33:23 -04:00 |
|
m0duspwnens
|
88fc1bbe32
|
quotes on vars
|
2024-06-11 16:32:57 -04:00 |
|
Corey Ogburn
|
d5ef0e5744
|
Fix unnecessary escaping
|
2024-06-11 12:34:32 -06:00 |
|
m0duspwnens
|
2ecac38f6d
|
disable logstash on heavynodes
|
2024-06-11 13:50:29 -04:00 |
|
Josh Brower
|
e90557d7dc
|
Merge pull request #13179 from Security-Onion-Solutions/2.4/fixintegritycheck
Add new bind - suricata all.rules
|
2024-06-11 13:08:40 -04:00 |
|
reyesj2
|
628893fd5b
|
remove redundant 'kafka_' from annotations & defaults
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-11 11:56:21 -04:00 |
|
reyesj2
|
a81e4c3362
|
remove dash(-) from kafka.id
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-11 11:55:17 -04:00 |
|
reyesj2
|
ca7b89c308
|
Added Kafka reset to SOC UI. Incase of changing an active broker to a controller topics may become unavailable. Resolving this would require manual intervention. This option allows running a reset to start from a clean slate to then configure cluster to desired state before reenabling Kafka as global pipeline.
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-11 11:21:13 -04:00 |
|
Josh Patterson
|
03335cc015
|
Merge pull request #13182 from Security-Onion-Solutions/dockerup
upgrade docker
|
2024-06-11 11:08:40 -04:00 |
|
reyesj2
|
08557ae287
|
kafka.id field should only be present when metadata for kafka exists
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-11 11:01:34 -04:00 |
|
DefensiveDepth
|
08d2a6242d
|
Add new bind - suricata all.rules
|
2024-06-11 10:03:33 -04:00 |
|
m0duspwnens
|
4b481bd405
|
add epoch to docker for oracle
|
2024-06-11 09:41:58 -04:00 |
|
m0duspwnens
|
0b1e3b2a7f
|
upgrade docker for focal
|
2024-06-10 16:24:44 -04:00 |
|
m0duspwnens
|
dbd9873450
|
upgrade docker for jammy
|
2024-06-10 16:04:11 -04:00 |
|
m0duspwnens
|
c6d0a17669
|
docker upgrade debian 12
|
2024-06-10 15:43:29 -04:00 |
|
m0duspwnens
|
adeab10f6d
|
upgrade docker and containerd.io for oracle
|
2024-06-10 12:14:27 -04:00 |
|
reyesj2
|
824f852ed7
|
merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-10 11:26:23 -04:00 |
|
reyesj2
|
284c1be85f
|
Update Kafka controller(s) via SOC UI
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-06-10 11:08:54 -04:00 |
|
Jason Ertel
|
7ad6baf483
|
Merge pull request #13171 from Security-Onion-Solutions/jertel/yaml
correct placement of error check override
|
2024-06-08 08:21:20 -04:00 |
|
Jason Ertel
|
f1638faa3a
|
correct placement of error check override
|
2024-06-08 08:18:34 -04:00 |
|
Jason Ertel
|
dea786abfa
|
Merge pull request #13170 from Security-Onion-Solutions/jertel/yaml
gracefully handle missing parent key
|
2024-06-08 07:49:49 -04:00 |
|
Jason Ertel
|
f96b82b112
|
gracefully handle missing parent key
|
2024-06-08 07:44:46 -04:00 |
|