2936 Commits

Author	SHA1	Message	Date
Josh Patterson	2e62494793	Merge pull request #1518 from Security-Onion-Solutions/issue/1153 ... fix issue with schedule being placed in wrong location	2020-10-14 09:26:31 -04:00
Doug Burks	f88403e83e	use ssl on nodes that support it	2020-10-14 05:50:29 -04:00
m0duspwnens	a08d0c8b6f	fix issue with schedule being placed in wrong location	2020-10-13 18:24:44 -04:00
Doug Burks	190869a1f2	enable https on elasticsearch nodes that support it	2020-10-13 16:04:55 -04:00
Josh Patterson	15ea152b84	Merge pull request #1515 from Security-Onion-Solutions/issue/1511 ... changes for https://github.com/Security-Onion-Solutions/securityonion/issues/1511	2020-10-13 14:17:28 -04:00
Wes Lambert	3f8f0da468	Replay verbiage -- let users know when preparing to replay	2020-10-13 18:13:36 +00:00
m0duspwnens	2456605a54	changes for https://github.com/Security-Onion-Solutions/securityonion/issues/1511	2020-10-13 14:10:24 -04:00
Doug Burks	0f68a53af4	Update so-curator-closed-delete-delete	2020-10-13 13:22:35 -04:00
Doug Burks	b004a9149e	Update so-index-list	2020-10-13 12:40:45 -04:00
Doug Burks	e5ece6cd50	Update so-index-list	2020-10-13 12:34:49 -04:00
Jason Ertel	2ad6ab7dfc	Dynamically alter docs URL based on airgap setting	2020-10-13 12:29:59 -04:00
Doug Burks	a75e986836	Update so-elastic-clear	2020-10-13 12:18:27 -04:00
Mike Reeves	c388966e7e	Add airgap config	2020-10-13 12:05:19 -04:00
Doug Burks	ad50b5d640	elasticsearch _cat/indices output has changed between 6 and 7	2020-10-13 06:33:40 -04:00
Doug Burks	21b1becd7e	Update so-elasticsearch-pipelines-list	2020-10-12 16:34:30 -04:00
Doug Burks	5458c57cc9	Update so-elasticsearch-pipeline-stats	2020-10-12 16:32:11 -04:00
Doug Burks	68e34b781a	Update so-elasticsearch-templates-load	2020-10-12 16:10:38 -04:00
Doug Burks	4c43262610	Update so-elasticsearch-templates-list	2020-10-12 16:08:06 -04:00
Wes Lambert	14559b081d	Ensure Zeek logs without ts field have an @timestamp field associated	2020-10-12 17:19:23 +00:00
Wes Lambert	4fc4913d1e	Don't predefine index date for Filebeat ES outputs	2020-10-12 15:44:00 +00:00
Wes Lambert	884cc2d054	Don't predefine index date for Logstash outputs	2020-10-12 15:41:47 +00:00
Doug Burks	553ce3e363	only include extra_hosts if nodestab exists	2020-10-12 10:13:05 -04:00
Mike Reeves	f5cfd480a3	Moar encryptions	2020-10-12 09:12:36 -04:00
Mike Reeves	9695e63950	fix template statement	2020-10-11 17:21:57 -04:00
Mike Reeves	96083e1458	update logstash outputs	2020-10-11 17:06:56 -04:00
Mike Reeves	deb0f640d6	add jinja templates	2020-10-11 17:02:07 -04:00
Mike Reeves	b7c4fd94c4	get pipelines to load	2020-10-11 16:57:08 -04:00
Mike Reeves	e4ce17d4de	Turn on SSL output	2020-10-11 16:10:55 -04:00
Mike Reeves	a7bd1c2ce5	Turn on SSL output	2020-10-11 15:58:12 -04:00
Mike Reeves	29c3948f95	Fix soc.json	2020-10-11 14:09:14 -04:00
Mike Reeves	31e0b5c81c	Add nodes to soc.json	2020-10-11 11:28:49 -04:00
Mike Reeves	73aade1223	Enable rest access from manager to sn	2020-10-11 11:02:20 -04:00
Mike Reeves	271e40337b	Enable jinja for tls	2020-10-11 10:57:04 -04:00
Mike Reeves	f6f9097cd9	Enable tls for 9200 on search capable nodes	2020-10-11 10:53:54 -04:00
Doug Burks	3cfee82b59	Update Hunt fields for firewall #1500	2020-10-10 08:18:00 -04:00
Doug Burks	87574181d5	Add Community ID to pfsense filterlog #1501	2020-10-10 08:11:51 -04:00
Doug Burks	5f15320b9d	Update Hunt fields for firewall #1500	2020-10-10 07:54:48 -04:00
Doug Burks	8d1ba1f4db	fix pfsense firewall udp parsing	2020-10-10 07:38:47 -04:00
Doug Burks	8cfabf101c	Update Hunt query for firewall #1499	2020-10-10 07:17:49 -04:00
Doug Burks	9aa4112de1	Remove extra comma	2020-10-10 06:10:10 -04:00
Wes Lambert	28a1f7f88a	Remove pfsense tag	2020-10-10 00:03:51 +00:00
Wes Lambert	b55ffa44f8	Fix module,dataset rename	2020-10-10 00:01:37 +00:00
Wes Lambert	69a04dedd3	Filterlog config changes	2020-10-09 23:56:52 +00:00
m0duspwnens	ea1324e498	fix LOSS calc line	2020-10-09 11:54:39 -04:00
m0duspwnens	3f007b6af7	Merge remote-tracking branch 'remotes/origin/dev' into issue/1403	2020-10-09 11:40:01 -04:00
m0duspwnens	f5cacd66b8	correct zeekcaptureloss script to work on zeek standalone	2020-10-09 11:39:44 -04:00
Jason Ertel	40ff628c0b	Replace simple pillar lookup with salt equivalent to ensure quoted values are handled properly	2020-10-09 11:10:46 -04:00
William Wernert	97fce74263	[fix] Rename playbook key and add new admin/automation psswds	2020-10-09 09:59:08 -04:00
William Wernert	d7961fdbb8	Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion into dev	2020-10-09 08:51:45 -04:00
William Wernert	5a8d776a62	[ix] Correct sls syntax	2020-10-09 08:51:35 -04:00