Commit Graph

8137 Commits

Author SHA1 Message Date
weslambert cf2233bbb6 Add help information for time shift 2023-08-03 08:54:54 -04:00
weslambert 3847863b3d Add time shift 2023-08-03 08:51:23 -04:00
Josh Brower 1bc7bbc76e Refactor custom_fqdn 2023-08-02 20:02:37 -04:00
Jason Ertel e108bb9bcd Merge pull request #10932 from Security-Onion-Solutions/jertel/agentcommon
remove unused vars
2023-08-02 19:29:03 -04:00
Jason Ertel 5414b0756c remove unused vars 2023-08-02 19:25:07 -04:00
Jason Ertel 11c827927c Merge pull request #10931 from Security-Onion-Solutions/jertel/agentcommon
refactor elastic-agent download for soup ctrl+c anomalies
2023-08-02 19:20:45 -04:00
Jason Ertel 3054b8dcb9 refactor elastic-agent download for soup ctrl+c anomalies 2023-08-02 18:57:46 -04:00
Josh Brower 399758cd5f Merge remote-tracking branch 'origin/2.4/dev' into 2.4/FleetEnhancments 2023-08-02 17:58:48 -04:00
Josh Brower 1c8a8c460c Restart logstash when certs change 2023-08-02 17:53:29 -04:00
Josh Brower ab28cee7cf Allow multiple Custom Fleet FQDN 2023-08-02 17:45:37 -04:00
Josh Patterson 435da77388 add gtk2 2023-08-02 16:53:45 -04:00
Josh Patterson eb512d9aa2 add mono-devel 2023-08-02 16:21:23 -04:00
Josh Brower f153c1125d Allow multiple Custom Fleet FQDN 2023-08-02 15:23:18 -04:00
Josh Brower aab55c8cf6 Regen Agent Installers 2023-08-02 15:09:26 -04:00
Josh Patterson f3c5d26a4e Merge pull request #10923 from Security-Onion-Solutions/soupaloop
Soupaloop
2023-08-02 14:44:49 -04:00
m0duspwnens 64776936cc no longer need so-user migrate in 2.4 2023-08-02 14:09:43 -04:00
m0duspwnens c17b324108 dont count adv_ sls files for number of minions in deployment 2023-08-02 14:04:19 -04:00
weslambert f102351052 Add event 2023-08-02 13:25:44 -04:00
weslambert ac28f90af3 Remove override 2023-08-02 13:15:11 -04:00
m0duspwnens f6c6204555 procps to procps-ng 2023-08-02 13:05:24 -04:00
m0duspwnens 9873121000 change pgrep for salt-minion PID 2023-08-02 12:54:31 -04:00
m0duspwnens 5630b353c4 change how pgrep finds salt-master PID 2023-08-02 11:20:51 -04:00
Josh Patterson 04ed5835ae Merge pull request #10918 from Security-Onion-Solutions/issue/10917
force portgroups added to hostgroups in roles to be list of strings
2023-08-02 11:00:41 -04:00
m0duspwnens 407cb2a537 force portgroups added to hostgroups in roles to be list of strings 2023-08-02 10:56:41 -04:00
Josh Brower b520c1abb7 Allow multiple Custom Fleet FQDN 2023-08-02 10:36:40 -04:00
weslambert 25b11c35fb Merge pull request #10915 from Security-Onion-Solutions/fix/ea_elastic_defend
Set version for Elastic Defend and enable updates
2023-08-02 10:32:30 -04:00
Wes e694019027 Add package list 2023-08-02 13:50:14 +00:00
weslambert 22ebb2faf6 Merge pull request #10907 from Security-Onion-Solutions/fix/ea_container_logs
EA Container Logs
2023-08-02 09:26:53 -04:00
Wes 0d5ed2e835 Set version for Elastic Defend and enable updates 2023-08-02 13:21:03 +00:00
Jason Ertel 23414599ee use simple json (w/o template) to resolve sluggishness 2023-08-01 16:53:26 -04:00
Jason Ertel 8b3a38f573 resolve login page flicker 2023-08-01 16:30:24 -04:00
Wes 0e047cffad Add to logrotate 2023-08-01 20:14:53 +00:00
Wes 44b086a028 Change path 2023-08-01 20:13:50 +00:00
Wes 4e2eb86b36 Move LOGS_PATH to environment vars 2023-08-01 20:11:51 +00:00
weslambert 1cbf60825d Add log dir 2023-08-01 14:40:52 -04:00
weslambert 2d13bf1a61 Present logs to the host 2023-08-01 14:40:12 -04:00
Josh Brower 968fee3488 Regen Agent Installers when Fleet URLs change 2023-08-01 13:10:41 -04:00
Doug Burks 3fa0a98830 Update verbiage and links in soc_sensor.yaml 2023-08-01 12:45:09 -04:00
weslambert e7bef745eb Merge pull request #10904 from Security-Onion-Solutions/fix/syslog
Move syslog to the INPUT chain where needed
2023-08-01 12:14:48 -04:00
Mike Reeves f35f42c83d Sensor NIC offload 2023-08-01 10:23:45 -04:00
weslambert 4adaddf13f Move syslog to the INPUT chain where needed 2023-08-01 10:14:59 -04:00
Mike Reeves b6579d7d45 Sensor NIC offload 2023-08-01 10:13:44 -04:00
Mike Reeves 87a5d20ac9 Sensor NIC offload 2023-08-01 10:03:59 -04:00
Mike Reeves 2875a7a2e5 Sensor NIC offload 2023-08-01 09:48:44 -04:00
Josh Brower 63b4bdcebe Merge remote-tracking branch 'origin/2.4/dev' into 2.4/heavyrc2 2023-08-01 08:53:07 -04:00
weslambert ba3660d0da Merge pull request #10894 from Security-Onion-Solutions/fix/soc_auth
SOC Auth msg fix
2023-08-01 08:35:41 -04:00
weslambert 527a6ba454 Use asterisk when searching 'msg' since it is now a keyword 2023-07-31 23:52:38 -04:00
Wes 48d9c14563 Enable log package by default 2023-08-01 02:20:43 +00:00
Wes 29b64eadd4 Change log.log to log.logs 2023-08-01 02:20:22 +00:00
weslambert 5dd5f9fc1c Elastic 8.8.2 2023-07-31 22:18:43 -04:00