523 Commits

Author	SHA1	Message	Date
weslambert	900d12b556	Add logger stanza to suppress deprecation warning messages for now due to current system index access warning messages flooding the ES log	2022-01-06 10:35:50 -05:00
Josh Patterson	eaa6597cd7	Merge pull request #6773 from Security-Onion-Solutions/issue/6765 ... Issue/6765	2022-01-05 18:11:06 -05:00
weslambert	c1a88977cf	Disable fielddata for _id field by default (since it is deprecated and can be memory-intensive)	2022-01-05 15:23:52 -05:00
m0duspwnens	0ff5e3cf6f	require so-elasticsearch container to be running to run the scripts	2022-01-05 14:48:41 -05:00
Jason Ertel	e87cbc37a4	Add case template	2021-12-28 19:17:15 -05:00
Jason Ertel	9aeaa1fccc	resolved merge conflicts	2021-12-21 09:35:57 -05:00
Jason Ertel	2c9062efb7	resolved merge conflicts	2021-12-21 09:34:39 -05:00
Jason Ertel	35617acaeb	Update cacerts to reflect new path; this changed due to ES 7.16.2	2021-12-20 12:12:00 -05:00
Jason Ertel	6f116a2d01	Switch to new Ubuntu SSL dir	2021-12-20 09:43:59 -05:00
Jason Ertel	d6c651af1c	Remove old patch dir from previously-patched installations	2021-12-20 09:42:27 -05:00
Jason Ertel	b8fcec04b8	Remove patched jar due to upgrade of Elastic images to 7.16.2	2021-12-20 09:27:03 -05:00
Mike Reeves	465ba1b7d3	Change CA certs location	2021-12-15 17:08:36 -05:00
Mike Reeves	61955b7928	Change CA certs location	2021-12-15 13:50:19 -05:00
Mike Reeves	7cd1b1c482	Remove some previous hotfix code	2021-12-15 12:26:53 -05:00
Jason Ertel	8365b5f140	Strip JndiLookup.class from log4j-core jars, to match Elastic's mitigation approach	2021-12-13 09:02:41 -05:00
Mike Reeves	3d7b963912	Update log4j2.properties	2021-12-10 14:16:16 -05:00
Mike Reeves	8dcb64d87c	Update init.sls	2021-12-10 11:56:33 -05:00
Mike Reeves	ea26e402c8	Update log4j2.properties	2021-12-10 10:17:49 -05:00
Mike Reeves	f5761c73a5	Fix for the clustername used in wrong context	2021-12-02 15:30:35 -05:00
m0duspwnens	5945326817	soup for es ingest common and watch esingestdynamicconf for so-elastic docker	2021-11-16 14:00:41 -05:00
m0duspwnens	6bf4d5a576	https://github.com/Security-Onion-Solutions/securityonion/issues/6206	2021-11-12 11:37:55 -05:00
m0duspwnens	1890c7244a	set elasticsearch:auth to persist through user pw change	2021-11-09 18:25:17 -05:00
m0duspwnens	a8c4ed7bbf	set elasticsearch:auth:enabled True in auth pillar	2021-11-09 18:05:05 -05:00
m0duspwnens	91f54537d7	handle elasticsearch.auth state like kibana.secrets	2021-11-09 17:52:38 -05:00
weslambert	9301b8f5b9	Add dynamic conf to config change check	2021-11-09 15:56:52 -05:00
Wes Lambert	f80b70e008	Add config for dynamically formatted ingest pipelines	2021-11-09 20:07:53 +00:00
Wes Lambert	46d3eb452d	Add ECS testing pipeline	2021-11-08 20:08:56 +00:00
Mike Reeves	dc07aba63d	Update so-common-template.json.jinja	2021-11-03 13:50:31 -04:00
Mike Reeves	747f14d60e	Make common template honor replicas	2021-11-03 13:11:38 -04:00
Josh Brower	2ba619144c	Support non-WEL Beats	2021-11-02 08:23:29 -04:00
Mike Reeves	095e6bd48c	Merge pull request #6044 from Burak-PLT/patch-1 ... Update auth.sls	2021-11-01 10:22:16 -04:00
Burak-PLT	f081938be5	Update auth.sls ... Change default password lengths to 72 characters from 20.	2021-10-28 16:00:58 -04:00
m0duspwnens	0c679b62b2	Merge remote-tracking branch 'remotes/origin/dev' into issue/5955	2021-10-25 16:29:41 -04:00
m0duspwnens	451b19dc4d	change from file to x509	2021-10-22 09:53:20 -04:00
m0duspwnens	f93c6146f5	docker binds requires	2021-10-21 15:24:55 -04:00
weslambert	77ee1db44c	Add .keyword subfield for conflict fields	2021-10-21 12:56:03 -04:00
weslambert	59852841ff	Add keyword subfield for event.module	2021-10-15 13:29:50 -04:00
Wes Lambert	e1629d7ec4	Initial EG stuff	2021-10-13 17:13:07 +00:00
Mike Reeves	2a82373051	highlander fixes	2021-10-08 09:32:13 -04:00
Mike Reeves	64758a534c	Set ml to true	2021-10-08 08:42:26 -04:00
Mike Reeves	27614569e3	Fix set	2021-10-05 14:32:02 -04:00
Mike Reeves	2fd344822d	Add additional roles for highlander	2021-10-05 10:40:40 -04:00
Mike Reeves	a3e0fb127a	Merge pull request #5069 from datlife/datlife/asn-annotation ... Add ASN annotation for IP	2021-10-05 06:50:31 -04:00
Dat	9569e73bd0	Added ASN annotation for IP	2021-10-04 12:41:20 -07:00
Josh Patterson	47cd1ddc0a	Merge pull request #5580 from Security-Onion-Solutions/issue/1257 ... Issue/1257 - Pillarize ES	2021-09-20 09:31:03 -04:00
m0duspwnens	aed73511e4	file cleanup, comment cleanup	2021-09-20 09:24:03 -04:00
m0duspwnens	109c83d8c3	move custom es cluster name pillar location	2021-09-17 15:29:41 -04:00
m0duspwnens	b877aa44bc	update dict	2021-09-17 14:10:45 -04:00
m0duspwnens	d0c87cd317	allow for pillar override of defaults	2021-09-17 12:11:12 -04:00
m0duspwnens	0d074dafd4	add missing defaults	2021-09-17 09:52:50 -04:00