Commit Graph

11026 Commits

Author SHA1 Message Date
Mike Reeves
4923fb1c35 Merge pull request #9563 from Security-Onion-Solutions/mkr24
Optimize reinstall process
2023-01-11 12:44:52 -05:00
Mike Reeves
8fa8b89d9c Fix reinstall logic 2023-01-11 12:43:22 -05:00
Mike Reeves
bab010a109 Fix reinstall logic 2023-01-11 12:40:18 -05:00
Mike Reeves
c07821a612 Fix reinstall logic 2023-01-11 12:32:43 -05:00
weslambert
acad7acc4a Merge pull request #9562 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_load_suricata_import
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
2023-01-11 12:27:37 -05:00
Mike Reeves
b36f1bc79e Fix reinstall logic 2023-01-11 12:26:50 -05:00
weslambert
4391c22335 Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies 2023-01-11 12:23:50 -05:00
weslambert
39d1f07fab Merge pull request #9561 from Security-Onion-Solutions/fix/filebeat_remove_module_setup
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
2023-01-11 12:21:39 -05:00
Mike Reeves
35e0a78cad Fix reinstall logic 2023-01-11 12:20:57 -05:00
weslambert
b3e0183e39 Remove pipeline.load from top.sls so that Filebeat module loading is not attempted 2023-01-11 12:19:06 -05:00
Mike Reeves
708ba13721 Fix reinstall logic 2023-01-11 12:18:02 -05:00
Mike Reeves
eee433e8c4 Fix reinstall logic 2023-01-11 12:17:13 -05:00
Mike Reeves
cd57ff9820 Fix reinstall logic 2023-01-11 12:16:18 -05:00
Mike Reeves
6d1e6fc358 Fix reinstall logic 2023-01-11 12:15:21 -05:00
Mike Reeves
0531d369aa Fix reinstall logic 2023-01-11 11:09:06 -05:00
Mike Reeves
55911ef649 Fix reinstall logic 2023-01-11 11:05:01 -05:00
weslambert
355953427c Merge pull request #9553 from Security-Onion-Solutions/feature/filebeat_to_elastic_agent_conversion
Initial Conversion of Filebeat Inputs to Elastic Agent Inputs
2023-01-11 09:22:40 -05:00
Wes
52b620b137 Add additional conditional logic for Filebeat and disable Filebeat 2023-01-11 14:10:11 +00:00
Wes
33e2affb1d Remove newlines from end of Syslog processor definitions 2023-01-11 14:08:28 +00:00
Wes
c3b83f1fc8 Update template settings to use data streams 2023-01-11 14:03:11 +00:00
Wes
5062dd2873 Suricata Elasticsearch ingest node pipeline changes - set 'alert' dataset 2023-01-11 14:02:09 +00:00
Wes
2e886d0c55 Remove data_index_name processor since we are using data streams 2023-01-11 13:58:38 +00:00
Wes
5d86edeed4 Modify Logstash Elastic Agent output to accomodate for events with and without 'metadata.pipeline' 2023-01-11 13:57:32 +00:00
Wes
caf0ea6b53 Add Elastic Agent policy view script 2023-01-11 13:56:21 +00:00
Wes
a146f1134e Add Elastic Agent utility scripts 2023-01-11 13:54:42 +00:00
Mike Reeves
7cecc910d5 Merge pull request #9458 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-11 08:49:15 -05:00
Doug Burks
668fe10fc0 Merge pull request #9552 from Security-Onion-Solutions/fix/import-unnecessary-processes
Prevent unnecessary processes in Import Mode
2023-01-11 08:07:40 -05:00
m0duspwnens
76fff1b1e0 add logstash ports 2023-01-10 17:02:54 -05:00
Josh Patterson
5993d06896 Merge pull request #9548 from Security-Onion-Solutions/2.4minefunctionsconf
Update so-functions
2023-01-10 16:58:09 -05:00
Josh Patterson
64af393f40 Update so-functions
change MAININT to MNIC
2023-01-10 16:57:17 -05:00
Doug Burks
c15db73561 Avoid unnecessary Zeek processes in Import Mode 2023-01-10 16:48:47 -05:00
Doug Burks
554754421c Avoid unecessary Suricata processes in Import Mode 2023-01-10 16:48:06 -05:00
Doug Burks
322efa304a Avoid unnecessary processes in Import Mode 2023-01-10 16:47:18 -05:00
Mike Reeves
9995d06626 Merge branch '2.4/firewall' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/firewall 2023-01-10 16:09:04 -05:00
Mike Reeves
ab3a7abcc7 run restore each time 2023-01-10 16:08:44 -05:00
Josh Patterson
f039ecb5ce Merge pull request #9547 from Security-Onion-Solutions/2.4/dev
2.4/dev
2023-01-10 13:42:44 -05:00
Mike Reeves
38962520ac Merge pull request #9546 from Security-Onion-Solutions/2.4minefunctionsconf
Update so-functions
2023-01-10 13:39:56 -05:00
Josh Patterson
0151830c85 Update so-functions 2023-01-10 13:37:56 -05:00
Mike Reeves
85978180c2 Merge pull request #9545 from Security-Onion-Solutions/revert-9544-2.4createrepoinstall
Revert "ensure yum-utils and createrepo are installed from so remote repo"
2023-01-10 13:13:31 -05:00
Mike Reeves
d3b8fbaafc Revert "ensure yum-utils and createrepo are installed from so remote repo" 2023-01-10 13:13:13 -05:00
Josh Patterson
745387a756 Merge pull request #9544 from Security-Onion-Solutions/2.4createrepoinstall
ensure yum-utils and createrepo are installed from so remote repo
2023-01-10 11:53:36 -05:00
m0duspwnens
39d808cb8f resolve conflict 2023-01-10 11:50:58 -05:00
Josh Patterson
ab8f41ecb5 Merge branch '2.4/firewall' into 2.4createrepoinstall 2023-01-10 11:38:31 -05:00
m0duspwnens
d2e623747d ensure yum-utils and createrepo are installed from so remote repo 2023-01-10 11:34:50 -05:00
Mike Reeves
3e9bddcd11 Changes to iptables.jinja 2023-01-09 15:36:23 -05:00
Mike Reeves
302bf28b6c Merge branch '2.4/firewall' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/firewall 2023-01-09 15:00:05 -05:00
Mike Reeves
5058210bbb Changes to iptables.jinja 2023-01-09 14:59:55 -05:00
m0duspwnens
ac157432de include docker 2023-01-09 14:58:36 -05:00
m0duspwnens
ec5c565cec put elastalert on sosbridge 2023-01-09 14:49:33 -05:00
m0duspwnens
dbbcea0009 look for True 2023-01-09 11:53:32 -05:00