 Jason Ertel
|
8f1e528f1c
|
improve regex
|
2025-04-17 11:09:39 -04:00 |
|
|
Jason Ertel
|
2f8d8d2d96
|
Merge branch '2.4/dev' into jertel/wip
|
2025-04-16 15:55:34 -04:00 |
|
|
Jason Ertel
|
366e39950a
|
subord annotations; ensure node reboots occur in background
|
2025-04-16 15:55:16 -04:00 |
|
 Josh Brower
|
5fd7bf311d
|
Add fallback
|
2025-04-15 13:57:55 -04:00 |
|
|
Josh Brower
|
152fdaa7bb
|
Support Kratos user.name lookup
|
2025-04-15 11:40:43 -04:00 |
|
 Josh Patterson
|
07ef3d632c
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-15 08:08:12 -04:00 |
|
 Jorge Reyes
|
7f5cde9a1c
|
Merge pull request #14540 from Security-Onion-Solutions/reyesj2/fix-14417
FIX: Add log.origin.file.line to base templates
|
2025-04-14 15:46:54 -05:00 |
|
|
reyesj2
|
58df566c79
|
add mapping for metadata.kafka.timestamp
|
2025-04-14 14:30:40 -05:00 |
|
|
reyesj2
|
395b81ffc6
|
FIX: Add log.origin.file.line to base templates #14417
|
2025-04-14 14:30:00 -05:00 |
|
|
reyesj2
|
df31c349b0
|
update annotations
|
2025-04-14 12:32:31 -05:00 |
|
|
reyesj2
|
759d5f76cd
|
fix kafka external access slow to establish initial connection
|
2025-04-14 12:32:22 -05:00 |
|
|
Josh Brower
|
240484deea
|
Merge pull request #14537 from Security-Onion-Solutions/2.4/idstoolsfix
Run so-rule-update when it changes
|
2025-04-14 11:20:32 -04:00 |
|
|
Josh Brower
|
ceabb673e0
|
Refactor for so-rule-update
|
2025-04-14 11:08:35 -04:00 |
|
|
Jorge Reyes
|
f1070992a8
|
Merge pull request #14538 from Security-Onion-Solutions/reyesj2-patch-5
|
2025-04-14 08:41:35 -05:00 |
|
|
reyesj2
|
c0f9c344bb
|
set logstash log rollover when log size exceeds 1G
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-04-14 08:13:27 -05:00 |
|
|
Josh Patterson
|
21bb325157
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-14 08:22:42 -04:00 |
|
|
Josh Brower
|
00029e6f83
|
Run so-rule-update when it changes
|
2025-04-14 08:04:46 -04:00 |
|
|
reyesj2
|
9459bf8a27
|
allow larger kafka log files before forcing rollover
|
2025-04-11 14:41:32 -05:00 |
|
|
Josh Patterson
|
96e99fc442
|
Merge pull request #14535 from Security-Onion-Solutions/mineimp
ensure the highstate retry runs only once
|
2025-04-11 14:43:17 -04:00 |
|
|
Josh Patterson
|
4b14bf90a3
|
ensure the highstate retry runs only once
|
2025-04-11 14:28:18 -04:00 |
|
|
reyesj2
|
2cb002668f
|
restrict count of kafka log files
|
2025-04-11 12:32:49 -05:00 |
|
|
Jorge Reyes
|
c11a10638b
|
Merge pull request #14528 from Security-Onion-Solutions/reyesj2-patch-4
external access to kafka topics via user/pass auth
|
2025-04-11 10:52:40 -05:00 |
|
|
reyesj2
|
6fe240de45
|
remove whitespaces then check for empty string as password
|
2025-04-11 10:42:45 -05:00 |
|
|
reyesj2
|
ecd7da540a
|
skip user entries that don't have password configured
|
2025-04-11 10:21:46 -05:00 |
|
|
Josh Brower
|
2a43a6f37e
|
Merge pull request #14532 from Security-Onion-Solutions/2.4/saltlogs
Fix comma
|
2025-04-11 07:51:35 -04:00 |
|
|
Josh Brower
|
4cdfb6e3eb
|
Fix comma
|
2025-04-11 07:49:35 -04:00 |
|
|
Josh Brower
|
1edd13523c
|
Merge pull request #14530 from Security-Onion-Solutions/fix/detections
Change timeout to 1s
|
2025-04-11 07:47:38 -04:00 |
|
|
Josh Brower
|
f94c81a041
|
Extract log level and drop INFO level
|
2025-04-11 07:45:12 -04:00 |
|
|
Josh Brower
|
4c3518385b
|
Change timeout to 1s
|
2025-04-11 07:37:09 -04:00 |
|
|
reyesj2
|
1429226667
|
nest default value for external_access under kafka:config
|
2025-04-10 15:55:17 -05:00 |
|
|
Josh Patterson
|
888ab162bd
|
update mine_functions and mine after mainint switch to br0. ensure br0 has ip before updating mine
|
2025-04-10 15:04:08 -04:00 |
|
|
reyesj2
|
5498673fc3
|
group events in 10s and remove deprecated output configuration option
|
2025-04-10 09:46:37 -05:00 |
|
|
reyesj2
|
96c56297ce
|
external access via user/pass
|
2025-04-09 22:08:13 -05:00 |
|
|
Josh Patterson
|
8ab38956d1
|
change from error to warning
|
2025-04-09 11:19:55 -04:00 |
|
|
Josh Patterson
|
0f120f7500
|
ensure manager is in /etc/hosts
|
2025-04-09 11:19:18 -04:00 |
|
|
Josh Patterson
|
f6a0e62853
|
include managerhype in orch. run hypervisor state before libvirt states
|
2025-04-08 09:50:26 -04:00 |
|
|
Josh Patterson
|
cc0e91aa96
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-07 08:52:50 -04:00 |
|
|
Josh Patterson
|
bf9f92b04e
|
remove soc_hypervisor.yaml
|
2025-04-04 13:47:54 -04:00 |
|
|
Jason Ertel
|
b99bb0b004
|
support options field on actions
|
2025-04-04 11:19:30 -04:00 |
|
|
Josh Patterson
|
445afca6ee
|
use vrt
|
2025-04-03 13:44:13 -04:00 |
|
|
Jason Ertel
|
9c455badb9
|
support background actions via config UI
|
2025-04-03 13:08:44 -04:00 |
|
|
Josh Patterson
|
9e16c03d25
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-04-03 08:47:54 -04:00 |
|
|
Josh Patterson
|
cd6deae0a7
|
add missing strelka backend scanners to SOC UI annotation file
|
2025-04-02 11:20:12 -04:00 |
|
|
Josh Patterson
|
0b8a7f5b67
|
fix strelka annotations. restart strelka containers on config change
|
2025-04-02 10:10:34 -04:00 |
|
 Jason Ertel
|
ba10228fef
|
Update soup
|
2025-04-01 09:42:10 -04:00 |
|
 Mike Reeves
|
71f146d1d9
|
Update soup
|
2025-04-01 09:36:22 -04:00 |
|
|
Josh Patterson
|
b22fe5bd3d
|
set interface for hypervisor/managerhype
|
2025-04-01 09:27:50 -04:00 |
|
|
Josh Patterson
|
a60e55e5cd
|
remove whitespace control
|
2025-03-31 16:44:48 -04:00 |
|
|
Josh Patterson
|
e7aa4428de
|
managerhype udate mine when switch to br0
|
2025-03-31 16:03:19 -04:00 |
|
|
Josh Patterson
|
64f71143dc
|
fix docker fw rules managerhype
|
2025-03-31 15:51:32 -04:00 |
|