Josh Patterson
493c9a11df
Merge pull request #1520 from Security-Onion-Solutions/issue/1519
...
disable strelka by default for sensor nodes during setup
2020-10-14 09:38:50 -04:00
m0duspwnens
1283708186
disable strelka by default for sensor nodes during setup
2020-10-14 09:36:59 -04:00
Josh Patterson
2e62494793
Merge pull request #1518 from Security-Onion-Solutions/issue/1153
...
fix issue with schedule being placed in wrong location
2020-10-14 09:26:31 -04:00
Doug Burks
f88403e83e
use ssl on nodes that support it
2020-10-14 05:50:29 -04:00
m0duspwnens
a08d0c8b6f
fix issue with schedule being placed in wrong location
2020-10-13 18:24:44 -04:00
Josh Patterson
9f6fcb3763
Merge pull request #1516 from Security-Onion-Solutions/quickfix/managerestempalte
...
add elasticsearch template manager pillar and assign to manager node
2020-10-13 16:09:24 -04:00
m0duspwnens
1afa12e607
add elasticsearch template manager pillar and assign to manager node
2020-10-13 16:08:15 -04:00
Doug Burks
190869a1f2
enable https on elasticsearch nodes that support it
2020-10-13 16:04:55 -04:00
William Wernert
f6296c095f
[fix] Redirect stderr to stdout for crontab -l
2020-10-13 15:00:00 -04:00
Josh Patterson
15ea152b84
Merge pull request #1515 from Security-Onion-Solutions/issue/1511
...
changes for https://github.com/Security-Onion-Solutions/securityonion/issues/1511
2020-10-13 14:17:28 -04:00
weslambert
4fff105986
Merge pull request #1514 from Security-Onion-Solutions/fix/replay_verbiage
...
Replay verbiage -- let users know when preparing to replay
2020-10-13 14:14:41 -04:00
Wes Lambert
3f8f0da468
Replay verbiage -- let users know when preparing to replay
2020-10-13 18:13:36 +00:00
m0duspwnens
2456605a54
changes for https://github.com/Security-Onion-Solutions/securityonion/issues/1511
2020-10-13 14:10:24 -04:00
William Wernert
675db1da1b
[fix] Remove tab from string in whiptail menu
2020-10-13 13:44:51 -04:00
Doug Burks
0f68a53af4
Update so-curator-closed-delete-delete
2020-10-13 13:22:35 -04:00
Doug Burks
b004a9149e
Update so-index-list
2020-10-13 12:40:45 -04:00
Doug Burks
e5ece6cd50
Update so-index-list
2020-10-13 12:34:49 -04:00
Jason Ertel
2ad6ab7dfc
Dynamically alter docs URL based on airgap setting
2020-10-13 12:29:59 -04:00
Doug Burks
a75e986836
Update so-elastic-clear
2020-10-13 12:18:27 -04:00
Mike Reeves
c388966e7e
Add airgap config
2020-10-13 12:05:19 -04:00
William Wernert
0cd80de2b3
[fix] Hard code NIDS to Suricata since Snort is not yet supported
2020-10-13 10:31:44 -04:00
William Wernert
a459511812
Merge pull request #1512 from Security-Onion-Solutions/bugfix/whiptail-punctuation
...
Bugfix/whiptail punctuation
2020-10-13 10:26:26 -04:00
William Wernert
9dc491bd71
[refactor] Fixes per style guide
2020-10-13 10:23:47 -04:00
William Wernert
f5ea8325fe
[fix] Standardize input prompts
...
* All prompts that are questions end in "?"
* All other prompts end in ":"
* Any additional sentences after a prompt follow normal grammatical rules for punctuation
2020-10-13 09:45:32 -04:00
Doug Burks
ad50b5d640
elasticsearch _cat/indices output has changed between 6 and 7
2020-10-13 06:33:40 -04:00
Doug Burks
21b1becd7e
Update so-elasticsearch-pipelines-list
2020-10-12 16:34:30 -04:00
Doug Burks
5458c57cc9
Update so-elasticsearch-pipeline-stats
2020-10-12 16:32:11 -04:00
Doug Burks
68e34b781a
Update so-elasticsearch-templates-load
2020-10-12 16:10:38 -04:00
Doug Burks
4c43262610
Update so-elasticsearch-templates-list
2020-10-12 16:08:06 -04:00
weslambert
a17a2ad3de
Merge pull request #1507 from Security-Onion-Solutions/fix/zeek_smb_ts_common
...
Ensure Zeek logs without ts field have an @timestamp field associated
2020-10-12 13:21:15 -04:00
Wes Lambert
14559b081d
Ensure Zeek logs without ts field have an @timestamp field associated
2020-10-12 17:19:23 +00:00
weslambert
748ff0dbeb
Merge pull request #1506 from Security-Onion-Solutions/fix/index_dates
...
Fix/index dates
2020-10-12 11:45:08 -04:00
Wes Lambert
4fc4913d1e
Don't predefine index date for Filebeat ES outputs
2020-10-12 15:44:00 +00:00
Wes Lambert
884cc2d054
Don't predefine index date for Logstash outputs
2020-10-12 15:41:47 +00:00
Doug Burks
553ce3e363
only include extra_hosts if nodestab exists
2020-10-12 10:13:05 -04:00
Mike Reeves
e0fe63d263
Merge pull request #1505 from Security-Onion-Solutions/experimental
...
Fix Cross Cluster Search Acks
2020-10-12 09:24:16 -04:00
Mike Reeves
f5cfd480a3
Moar encryptions
2020-10-12 09:12:36 -04:00
Jason Ertel
3fff1451d4
Enable high strength cipher for golang compatibility
2020-10-11 22:31:29 -04:00
Mike Reeves
9695e63950
fix template statement
2020-10-11 17:21:57 -04:00
Mike Reeves
96083e1458
update logstash outputs
2020-10-11 17:06:56 -04:00
Mike Reeves
deb0f640d6
add jinja templates
2020-10-11 17:02:07 -04:00
Mike Reeves
b7c4fd94c4
get pipelines to load
2020-10-11 16:57:08 -04:00
Mike Reeves
e4ce17d4de
Turn on SSL output
2020-10-11 16:10:55 -04:00
Mike Reeves
a7bd1c2ce5
Turn on SSL output
2020-10-11 15:58:12 -04:00
Josh Patterson
c9c8c5e5f5
Merge pull request #1502 from Security-Onion-Solutions/quickfix/socrestart
...
watch all the files in the dir
2020-10-11 14:20:34 -04:00
m0duspwnens
c1e6c5688d
watch all the files in the dir
2020-10-11 14:19:44 -04:00
Mike Reeves
29c3948f95
Fix soc.json
2020-10-11 14:09:14 -04:00
Mike Reeves
31e0b5c81c
Add nodes to soc.json
2020-10-11 11:28:49 -04:00
Mike Reeves
73aade1223
Enable rest access from manager to sn
2020-10-11 11:02:20 -04:00
Mike Reeves
271e40337b
Enable jinja for tls
2020-10-11 10:57:04 -04:00