9676 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
weslambert	4201ee45c6	Merge pull request #7369 from Security-Onion-Solutions/fix/ingest_timestamp ... Rename ingest timestamp to event.ingested	2022-03-01 10:11:16 -05:00
Wes Lambert	038dc49098	Temporarily increase field limit before trimming efforts	2022-03-01 15:06:28 +00:00
Wes Lambert	dc07adca63	Rename ingest.timestamp to event.ingested	2022-03-01 15:05:08 +00:00
Josh Brower	39718561ce	Merge pull request #7366 from Security-Onion-Solutions/delta ... Enable state tracking for sigma refresh	2022-03-01 05:53:14 -05:00
Josh Brower	e960d99901	Enable state tracking for sigma refresh	2022-02-28 21:18:41 -05:00
Josh Brower	09f1a5025d	Merge remote-tracking branch 'remotes/origin/dev' into delta	2022-02-28 21:18:07 -05:00
Josh Brower	41a58b791a	Enable state tracking for sigma refresh	2022-02-28 21:17:59 -05:00
Jason Ertel	73b2a36e89	Merge pull request #7365 from Security-Onion-Solutions/kilo ... Upgrade to ES 7.17.1	2022-02-28 18:26:31 -05:00
Jason Ertel	f147bb33ed	Upgrade to ES 7.17.1	2022-02-28 18:18:09 -05:00
Josh Patterson	6b3b5e9a1f	Merge pull request #7363 from Security-Onion-Solutions/soup_singlenode_30 ... allow for check_log_size_limit to work without salt-master running	2022-02-28 17:13:42 -05:00
Josh Brower	f824717094	Merge pull request #7364 from Security-Onion-Solutions/delta ... IDH Node verbiage	2022-02-28 17:09:08 -05:00
Josh Brower	0cee0d5dea	IDH Node verbiage	2022-02-28 16:47:24 -05:00
Josh Brower	d71bde0e38	Merge pull request #7362 from Security-Onion-Solutions/delta ... Navigator - include attack json for airgap	2022-02-28 16:33:10 -05:00
Josh Brower	2075412ca2	Navigator - include attack json for airgap	2022-02-28 16:15:30 -05:00
m0duspwnens	a51f833f36	output only the value for log_size_limit	2022-02-28 16:13:43 -05:00
Jason Ertel	04a99a0adc	Merge pull request #7361 from Security-Onion-Solutions/kilo ... Clear out hotfix file	2022-02-28 16:04:30 -05:00
Jason Ertel	166ac0d194	Clear out hotfix file	2022-02-28 16:01:42 -05:00
m0duspwnens	8d12e136f2	Merge remote-tracking branch 'remotes/origin/dev' into soup_singlenode_30	2022-02-28 15:43:37 -05:00
m0duspwnens	710059211d	remove debug echo, mkdir verbose	2022-02-28 14:54:39 -05:00
weslambert	a1c0ae4aab	Merge pull request #7356 from Security-Onion-Solutions/fix/es_config_load_order ... Run template load first to prevent issues with pipeline changes that …	2022-02-28 14:50:22 -05:00
m0duspwnens	80e5198f9e	combine local and default pillars to get pillar values locally	2022-02-28 14:35:16 -05:00
m0duspwnens	dc24cb711d	need local to be --local	2022-02-28 13:50:08 -05:00
m0duspwnens	c5bf818049	debug messages and pass local to lookup_salt_value	2022-02-28 13:39:50 -05:00
weslambert	414b9dcd59	Run template load first to prevent issues with pipeline changes that generate new indices	2022-02-28 12:33:18 -05:00
m0duspwnens	cd981fa2ae	forgot then for if	2022-02-28 12:25:06 -05:00
m0duspwnens	278235b0ca	update so-common lookup_salt_value to accept local option. soup get minion id from grains with local option	2022-02-28 12:15:23 -05:00
weslambert	a9caef9596	Merge pull request #7338 from Security-Onion-Solutions/fix/endgame_template ... Revert Endgame index name changes	2022-02-28 08:13:09 -05:00
Doug Burks	e0b3635318	Merge pull request #7339 from Security-Onion-Solutions/fix/zeek_dns-import ... Avoid changing _index for imported logs	2022-02-27 05:09:00 -05:00
Doug Burks	32b71fdcac	Avoid changing _index for imported logs	2022-02-26 10:36:09 -05:00
Wes Lambert	bd1b21a5b6	Revert Endgame index name changes	2022-02-26 02:53:57 +00:00
weslambert	56cb8d62ab	Merge pull request #7337 from Security-Onion-Solutions/fix/pb_overrides ... Fix formatting for PB overrides	2022-02-25 20:48:38 -05:00
weslambert	e942d81433	Ensure correct formatting for source override	2022-02-25 19:14:58 -05:00
weslambert	a511fd33e9	Ensure correct formatting for destination override	2022-02-25 19:14:21 -05:00
Doug Burks	74037e6f00	Merge pull request #7335 from Security-Onion-Solutions/fix/soup-postversion ... make sure that each post_to_* function sets POSTVERSION at end	2022-02-25 15:27:31 -05:00
Josh Brower	25b0069353	Merge pull request #7334 from Security-Onion-Solutions/delta ... IDH Setup - dont show ssh fix screen	2022-02-25 15:01:25 -05:00
Josh Brower	6a270eb8b3	IDH Setup - dont show ssh fix screen - fix	2022-02-25 14:58:30 -05:00
Josh Brower	ee39ec1882	IDH Setup - dont show ssh fix screen	2022-02-25 14:55:28 -05:00
Doug Burks	8df47e809d	make sure that each post_to_* function sets POSTVERSION at end	2022-02-25 14:30:59 -05:00
Mike Reeves	fa15a2e012	Merge pull request #7333 from Security-Onion-Solutions/endgamecurator ... Fix endgame index name	2022-02-25 13:31:29 -05:00
Mike Reeves	15924ebe0f	Fix endgame index name	2022-02-25 13:29:29 -05:00
weslambert	c95f48e49a	Merge pull request #7330 from Security-Onion-Solutions/fix/pb-override ... Override destination/source mappings with .keyword for Playbook	2022-02-25 13:07:31 -05:00
Wes Lambert	a8bdff89ae	Move files into SO component template directory	2022-02-25 18:00:16 +00:00
Wes Lambert	08097fe9ec	Add Playbook override mappings	2022-02-25 17:58:51 +00:00
Josh Brower	ce4c859f3a	Merge pull request #7328 from Security-Onion-Solutions/fix/soup-sigma-refresh ... .110 Post processing - sigma refresh	2022-02-25 12:24:19 -05:00
Josh Patterson	9de9d92b2b	Merge pull request #7329 from Security-Onion-Solutions/delta ... add extra hosts for filebeat on idh node	2022-02-25 12:23:37 -05:00
m0duspwnens	d76facb1bb	add extra hosts for idh node	2022-02-25 12:21:43 -05:00
Josh Brower	1abf27873d	.110 Post processing - sigma refresh	2022-02-25 12:19:59 -05:00
weslambert	a6ab09501e	Merge pull request #7326 from Security-Onion-Solutions/fix/additional_text_subfield_mappings ... Add additional .text subfield mappings	2022-02-25 11:29:26 -05:00
Wes Lambert	61dadc6249	Add additional .text subfield mappings	2022-02-25 16:27:37 +00:00
Josh Brower	be80f0530c	Merge pull request #7321 from Security-Onion-Solutions/delta ... IDH Improvements	2022-02-24 21:27:36 -05:00