12256 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Josh Patterson	4b18a0e758	Merge pull request #10417 from Security-Onion-Solutions/issue/10229 ... Issue/10229	2023-05-23 13:47:48 -04:00
Josh Brower	f6a9a764de	Merge pull request #10416 from Security-Onion-Solutions/2.4/smallfixes ... 2.4/EQL	2023-05-23 13:28:11 -04:00
m0duspwnens	e65214b097	Merge remote-tracking branch 'origin/2.4/dev' into issue/10229	2023-05-23 12:10:29 -04:00
m0duspwnens	cc47f9a595	fix suricata thresholding	2023-05-23 11:16:32 -04:00
m0duspwnens	eb633be437	enable/disable suricata in ui. assign threads properly	2023-05-22 17:48:22 -04:00
Josh Brower	df0dc2e4d1	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/smallfixes	2023-05-22 16:02:30 -04:00
Josh Brower	766f4dd661	Add Elastic Defend Integration	2023-05-22 16:02:08 -04:00
Jason Ertel	f53fb69ffb	Merge pull request #10407 from Security-Onion-Solutions/kilo ... Ignore Synchronize button clicks when an active salt job is running and another is already in queue	2023-05-22 14:59:42 -04:00
Jason Ertel	ba0ec18a33	Ignore Synchronize button clicks when an active salt job is running and another is already in queue	2023-05-22 14:52:07 -04:00
weslambert	79182cecfd	Merge pull request #10397 from Security-Onion-Solutions/fix/elastic_exclude_zeek_reporter_log ... Exclude Zeek's reporter.log from being picked up by Elastic Agent	2023-05-22 07:56:54 -04:00
weslambert	8cf82c4b6a	Merge pull request #10398 from Security-Onion-Solutions/fix/elasticsearch_ingest_dns_query ... Check if 'dns.query' is null	2023-05-22 07:56:44 -04:00
weslambert	78d4586033	Merge pull request #10399 from Security-Onion-Solutions/fix/elastalert_playbook_alerter ... Update 'url' to use 'es_hosts'	2023-05-22 07:56:31 -04:00
Jason Ertel	02cf1074f2	Merge pull request #10400 from Security-Onion-Solutions/kilo ... use the same requests version that's already packaged with the analyzer	2023-05-20 08:45:21 -04:00
Jason Ertel	a881cab469	use the same requests version that's already packaged with the analyzer	2023-05-19 23:54:30 -04:00
weslambert	00bd93c026	Update 'url' to use 'es_hosts'	2023-05-19 17:14:13 -04:00
weslambert	2c10ad7eec	Check if 'dns.query' is null	2023-05-19 15:50:33 -04:00
weslambert	167051af28	Exclude Zeek's reporter.log from being picked up by Elastic Agent	2023-05-19 15:44:09 -04:00
weslambert	eb9c5e9af0	Merge pull request #10307 from Security-Onion-Solutions/fix/elastic_fleet_ignore_zeek_logs ... Don't read from 'known_hosts.log', 'known_services.log', or 'ntp.log'	2023-05-19 15:09:15 -04:00
Jason Ertel	2f942a3e37	Merge pull request #10393 from Security-Onion-Solutions/kilo ... fix lib dependency issue with whoisit	2023-05-19 14:34:42 -04:00
Jason Ertel	03f97b309a	fix lib dependency issue with whoisit	2023-05-19 14:18:19 -04:00
weslambert	c6a962a46b	Merge pull request #10392 from Security-Onion-Solutions/fix/elastalert_index ... Change Elastalert writeback index name from 'elastalert_status' to 'elastalert'	2023-05-19 13:31:29 -04:00
weslambert	1ddf45bbbe	Change Elastalert writeback index name from 'elastalert_status' to 'elastalert'	2023-05-19 12:39:27 -04:00
Doug Burks	f0c4cebaca	Merge pull request #10391 from Security-Onion-Solutions/2.4/elastic-8.7.1 ... UPGRADE: Elastic 8.7.1 #10269	2023-05-19 12:29:01 -04:00
Doug Burks	87c42ece00	Update so-kibana-config-load	2023-05-19 12:21:09 -04:00
Doug Burks	4f8fcd3369	Update config_saved_objects.ndjson	2023-05-19 12:19:44 -04:00
Josh Patterson	0027385da9	Merge pull request #10389 from Security-Onion-Solutions/issue/10229 ... enable playbook on eval in pillar during setup	2023-05-18 17:38:05 -04:00
m0duspwnens	4ef77f9050	enable playbook on eval in pillar during setup	2023-05-18 17:34:59 -04:00
weslambert	c192ec9109	Merge pull request #10385 from Security-Onion-Solutions/feature/elastalert_eql ... Add initial support for EQL queries for Elastalert	2023-05-18 15:36:28 -04:00
Josh Patterson	059f80bfc4	Merge pull request #10384 from Security-Onion-Solutions/issue/10334 ... Issue/10334	2023-05-18 13:28:47 -04:00
m0duspwnens	bab2f7282c	fix spaciong	2023-05-18 13:27:48 -04:00
m0duspwnens	02920b5ac9	confirm manager ip when found in setup	2023-05-18 13:25:12 -04:00
m0duspwnens	25b0934cda	confirm manager ip when found in setup	2023-05-18 13:06:20 -04:00
Wes	d3c7ea4805	Add EQL option	2023-05-18 16:55:26 +00:00
Wes	82c3d78672	Change Elasticsearch host syntax	2023-05-18 16:52:27 +00:00
Josh Brower	97b68609bc	Merge pull request #10381 from Security-Onion-Solutions/2.4/smallfixes ... 2.4/ElasticFleetPunchList	2023-05-18 09:04:30 -04:00
Josh Patterson	1d611e618f	Merge pull request #10383 from Security-Onion-Solutions/issue/10229 ... remove conditional on cacertz and capemz	2023-05-18 08:45:41 -04:00
m0duspwnens	f4b8d385ee	remove conditional on cacertz and capemz	2023-05-18 08:36:24 -04:00
Jason Ertel	b7e0923ec4	Merge pull request #10382 from Security-Onion-Solutions/kilo ... add missing var for local dev	2023-05-17 18:58:29 -04:00
Jason Ertel	4930ae4ba6	add missing var for local dev	2023-05-17 18:14:21 -04:00
Josh Brower	d11479ec5f	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/smallfixes	2023-05-17 16:11:46 -04:00
Josh Brower	901e3c4a20	Set Fleet Host timeouts to 120 seconds	2023-05-17 16:07:59 -04:00
Josh Patterson	81842462ba	Merge pull request #10380 from Security-Onion-Solutions/issue/10229 ... Issue/10229	2023-05-17 15:53:15 -04:00
m0duspwnens	e15c14cc2e	fix indent	2023-05-17 15:50:31 -04:00
m0duspwnens	f7ddf57f39	move files out of config	2023-05-17 15:49:22 -04:00
Josh Brower	47e67fda46	Rework restart scripts for Elastic Fleet	2023-05-17 15:37:39 -04:00
Josh Brower	7d0251952c	Filter out uneeded Logstash metadata	2023-05-17 11:06:16 -04:00
Josh Brower	5536f5a8c2	Add Fleet node to other roles	2023-05-17 09:32:20 -04:00
Josh Patterson	2c932fae9d	Merge pull request #10371 from Security-Onion-Solutions/salt3006.1 ... Salt3006.1	2023-05-16 16:59:31 -04:00
Josh Brower	24445cf36a	Rename Fleet pipelines	2023-05-16 16:43:21 -04:00
m0duspwnens	0feb25c962	Merge remote-tracking branch 'origin/2.4/dev' into salt3006.1	2023-05-16 16:07:31 -04:00