9897 Commits

Author	SHA1	Message	Date
Wes	409612ff1f	Add script to upgrade integrations	2024-09-11 14:56:57 +00:00
Josh Patterson	e7a7a8609a	Merge pull request #13640 from Security-Onion-Solutions/esver ... only elasticsearch image uses es version	2024-09-09 16:45:14 -04:00
m0duspwnens	8702d95434	only elasticsearch image uses es version	2024-09-09 16:38:38 -04:00
Wes	25a9fb9b5c	Add destination IP for so-system	2024-09-09 20:16:23 +00:00
m0duspwnens	7123c62876	add so-suricata container req for rule reload	2024-09-09 11:13:28 -04:00
m0duspwnens	b150969986	Merge remote-tracking branch 'origin/2.4/dev' into upgrade/docker	2024-09-09 07:56:34 -04:00
Josh Patterson	56aa57dab2	Merge pull request #13625 from Security-Onion-Solutions/esver ... remove -it	2024-09-06 12:28:08 -04:00
m0duspwnens	ba24c5b219	remove -it	2024-09-06 12:26:55 -04:00
m0duspwnens	43c2436385	Merge remote-tracking branch 'origin/2.4/dev' into upgrade/docker	2024-09-06 11:38:33 -04:00
Josh Patterson	ba0779ea1e	Merge pull request #13624 from Security-Onion-Solutions/esver ... fix es agent update for soup	2024-09-06 10:46:18 -04:00
m0duspwnens	2e379dd29c	fix line delete causing issues sourcing so-common and es agent grid upgrade	2024-09-06 10:44:35 -04:00
m0duspwnens	331f63eadd	pass path for airgap	2024-09-06 10:30:40 -04:00
m0duspwnens	fc25bfe0df	grab es version from defaults during soup	2024-09-06 09:04:43 -04:00
m0duspwnens	576d218cd9	dont restart suricata during setup. retry rule reload for 3 minutes	2024-09-06 08:10:59 -04:00
Jason Ertel	5625771ffb	es version shift	2024-09-05 13:16:28 -04:00
Jason Ertel	c85e5643db	es version shift	2024-09-05 13:14:45 -04:00
m0duspwnens	21473aba9e	Merge remote-tracking branch 'origin/2.4/dev' into upgrade/docker	2024-09-05 10:23:50 -04:00
m0duspwnens	5a1d61a042	ref es version	2024-09-05 08:45:44 -04:00
m0duspwnens	6581979506	retry suricata rule reload	2024-09-05 07:33:56 -04:00
m0duspwnens	df14cbad44	fix calls to get_elastic_agent_vars	2024-09-04 17:43:49 -04:00
m0duspwnens	72f3eaa8f6	should not have changed this, so changing it back	2024-09-04 16:42:19 -04:00
m0duspwnens	f106191e72	fix image for so-elasticsearch container	2024-09-04 16:01:24 -04:00
m0duspwnens	7d9b3b1f28	use correct sig	2024-09-04 15:36:17 -04:00
Josh Patterson	71f6b44c0c	Merge pull request #13607 from Security-Onion-Solutions/esver ... use Elasticsearch version for some containers	2024-09-04 13:30:07 -04:00
m0duspwnens	2b807c2409	update comment	2024-09-04 10:33:14 -04:00
m0duspwnens	0af2e85f91	update annotation.	2024-09-04 10:32:11 -04:00
m0duspwnens	2394488c92	update docker 27.2.0-1 and containerd.io 1.7.21	2024-09-04 09:38:17 -04:00
m0duspwnens	cfdc8ede90	fix es version logic	2024-09-03 16:49:39 -04:00
m0duspwnens	83aa4c9a53	fix awk	2024-09-03 15:22:25 -04:00
m0duspwnens	c20ac6c2d8	fix if and awk	2024-09-03 15:20:49 -04:00
Josh Brower	7311773c20	Merge pull request #13598 from Security-Onion-Solutions/2.4/main ... Hotfix-2.4.100.20240903	2024-09-03 13:13:16 -04:00
m0duspwnens	6d7b76115f	use the version that is longest for the loop	2024-09-03 13:00:37 -04:00
m0duspwnens	a920adcf7f	handle ver1 missing segment	2024-09-03 12:53:53 -04:00
m0duspwnens	529844eb36	update so-image-common to use es version for es containers	2024-09-03 12:38:21 -04:00
Mike Reeves	5811ee5897	Update so-suricata-reload-rules	2024-09-01 10:39:42 -04:00
weslambert	a7de6993f9	Add so-system-mappings	2024-08-30 16:11:41 -04:00
Mike Reeves	afcb30be03	Threhsolds require a restart	2024-08-30 09:43:35 -04:00
Mike Reeves	b9f817201c	Add thresholds to the reload list	2024-08-30 09:15:25 -04:00
Mike Reeves	edce5186b9	Add support to relaod rules instead of restart	2024-08-29 12:55:06 -04:00
DefensiveDepth	89a1e2500e	Exclude logstash startup errors	2024-08-28 16:50:11 -04:00
Jason Ertel	394ce29ea3	Merge pull request #13565 from Security-Onion-Solutions/jertel/an2 ... move custom alerters to subgroup; avoid false positives on log check	2024-08-28 09:39:44 -04:00
Jason Ertel	f19a35ff06	move custom alerters to subgroup; avoid false positives on log check	2024-08-28 09:32:25 -04:00
weslambert	8943e88ca8	Merge pull request #13562 from Security-Onion-Solutions/fix/evtx_pipelines ... Update pipeline version for EVTX	2024-08-27 13:12:10 -04:00
Jason Ertel	18774aa0a7	Merge pull request #13561 from Security-Onion-Solutions/jertel/an2 ... annotation updates	2024-08-27 13:09:20 -04:00
weslambert	af80a78406	Update pipeline version	2024-08-27 13:08:35 -04:00
Jason Ertel	6043da4424	annotation updates	2024-08-27 13:04:43 -04:00
DefensiveDepth	726df310ee	Add context	2024-08-26 16:15:56 -04:00
DefensiveDepth	b952728b2c	Fix policy load	2024-08-26 15:57:21 -04:00
weslambert	1cac2ff1d4	Merge pull request #13554 from Security-Onion-Solutions/fix/ilm_soc_logs ... FIX: Add so-soc-logs	2024-08-26 12:54:03 -04:00
weslambert	a93c77a1cc	Merge pull request #13548 from Security-Onion-Solutions/fix/global_custom ... Use global@custom from common pipeline	2024-08-26 10:42:12 -04:00