Commit Graph

11102 Commits

Author SHA1 Message Date
Wes
51692ac66c Update index pattern in various template definitions to match new data stream naming convention 2023-01-23 21:52:44 +00:00
Wes
40c6b380df Update Import and Zeek integration policies; also update Zeek ingest node pipelines to set event.dataset. 2023-01-23 21:44:46 +00:00
Wes
d342f3c4b8 Add 'so-elastic-fleet-integration-policy-bulk-delete' to perform bulk deletion of integration policies 2023-01-23 21:38:13 +00:00
Josh Patterson
a503632f30 Merge pull request #9620 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-23 15:56:53 -05:00
m0duspwnens
d1ec7c8ace remove to match with 2.4/dev 2023-01-23 15:50:53 -05:00
Jason Ertel
5da1b03d9b Merge pull request #9619 from Security-Onion-Solutions/kilo
switch MySQL 8 to use native password for playbook compat; fix so-verify mail inspection
2023-01-23 15:14:00 -05:00
Jason Ertel
5a016312f6 switch MySQL 8 to use native password to avoid playbook incompatibility 2023-01-23 14:53:39 -05:00
m0duspwnens
90a224793e merge with 2.4dev and fix conflict 2023-01-23 14:49:32 -05:00
m0duspwnens
22fbb953ea create cronjob to run highstate after setup 2023-01-23 14:46:26 -05:00
Jason Ertel
d421aa82a2 do not treat all installs as ISO; fix check for non-empty mail files 2023-01-23 14:04:26 -05:00
Josh Patterson
1039e77550 Merge pull request #9617 from Security-Onion-Solutions/2.4/firewall
allow elastic agent on sensors to connect to managers
2023-01-23 13:19:49 -05:00
Josh Brower
f811223ba7 Merge pull request #9614 from Security-Onion-Solutions/playbookfixup
Playbookfixup
2023-01-23 08:20:06 -05:00
Josh Brower
d3cb57bba2 Rerun the playbook state 2023-01-23 08:16:28 -05:00
m0duspwnens
a1fa4e3ef2 revert reload_modules since bugged 2023-01-20 15:43:57 -05:00
Josh Brower
1ab8c712e4 remove exit condition 2023-01-20 15:17:04 -05:00
Jason Ertel
a613d960b9 Merge pull request #9608 from Security-Onion-Solutions/kilo
setup improvements
2023-01-20 13:11:11 -05:00
Jason Ertel
9541214073 logCmd with tee is eating the exit code 2023-01-20 12:26:52 -05:00
Jason Ertel
56478da0b2 eliminate find/exec issue altogether to keep it simple 2023-01-20 11:58:29 -05:00
Jason Ertel
c3384d8381 further improvements 2023-01-20 11:23:13 -05:00
Jason Ertel
1e4f9c9f26 use newer find syntax to allow the exec to work inside a quoted string 2023-01-20 11:01:02 -05:00
Jason Ertel
fea4a1b33d Merge branch '2.4/dev' into kilo 2023-01-20 10:33:17 -05:00
Jason Ertel
ece63b72e2 Ensure so-verify output is logged 2023-01-20 07:38:58 -05:00
Jason Ertel
46aa7ebdf3 correct find/exec syntax 2023-01-20 06:48:33 -05:00
weslambert
9c83b775ee Merge pull request #9604 from Security-Onion-Solutions/feature/sensoroni_scripts
Add scripts for starting, stopping, and restarting Sensoroni
2023-01-19 16:59:29 -05:00
Wes
739c174898 Add scripts for starting, stopping, and restarting Sensoroni 2023-01-19 21:50:10 +00:00
Jason Ertel
4044706cd9 Merge pull request #9603 from Security-Onion-Solutions/kilo
Handle setup failures
2023-01-19 15:49:41 -05:00
Jason Ertel
79fb5dc525 prevent false success occurring when deleting the grafana dashboard 2023-01-19 14:19:55 -05:00
Jason Ertel
59177288ef correct grep patterns 2023-01-19 13:56:14 -05:00
Jason Ertel
85b5d1b317 Merge branch '2.4/dev' into kilo 2023-01-19 12:53:36 -05:00
Jason Ertel
6b7a8e1fcd fix verify path 2023-01-19 12:53:24 -05:00
Josh Brower
027c83b5ea Merge pull request #9601 from Security-Onion-Solutions/disablecontainer
Fixup
2023-01-19 11:47:04 -05:00
Josh Brower
4369d2385b Temp disable Elastic Registry Repo 2023-01-19 11:45:13 -05:00
Jason Ertel
c5260e4787 verify setup 2023-01-19 11:25:59 -05:00
Jason Ertel
35835edf96 Merge branch '2.4/dev' into kilo 2023-01-19 11:04:32 -05:00
weslambert
8c4e00cfbd Merge pull request #9600 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_remove
Remove default "logs-*" template settings for now
2023-01-19 10:30:44 -05:00
weslambert
7d3f6121eb Remove default "logs-*" template settings for now 2023-01-19 10:29:10 -05:00
Jason Ertel
05c7999df3 merge 2023-01-19 10:06:58 -05:00
Jason Ertel
05a6d702b0 Add logic to determine if setup succeeded and provide relevant output 2023-01-19 10:03:03 -05:00
Josh Brower
8ce96942c1 Merge pull request #9599 from Security-Onion-Solutions/disablecontainer
Temp disable Elastic Registry Repo
2023-01-19 07:27:51 -05:00
Josh Brower
e83e54936e Temp disable Elastic Registry Repo 2023-01-19 07:25:25 -05:00
weslambert
90f3e33cc6 Merge pull request #9597 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_priority_modification
Modify default 'logs-*' Elasticsearch template priority
2023-01-18 17:30:52 -05:00
weslambert
7a499c9051 Modify default 'logs-*' template priority 2023-01-18 17:24:07 -05:00
m0duspwnens
1eafb8d62a reload salt modules when docker is installed 2023-01-18 13:46:06 -05:00
m0duspwnens
d501b0fac9 add elastic agent to assigned hostgroups 2023-01-18 09:46:55 -05:00
weslambert
1bf088e976 Merge pull request #9591 from Security-Onion-Solutions/fix/kibana_basepath_rewrite_disable
Disable Kibana's native base path rewrite and add publicBaseUrl
2023-01-17 16:59:06 -05:00
weslambert
1fed3cf474 Disable Kibana's native base path rewrite and add publicBaseUrl 2023-01-17 16:54:31 -05:00
Josh Patterson
e0f8315d27 Merge pull request #9590 from Security-Onion-Solutions/2.4/firewall
create /opt/so/ for non manager nodes during setup
2023-01-17 15:36:34 -05:00
m0duspwnens
dbfe176b45 create /opt/so/ for non manager nodes during setup 2023-01-17 14:15:44 -05:00
Josh Patterson
2842178396 Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall
fix iptables
2023-01-17 13:50:16 -05:00
m0duspwnens
aa858bab45 fix iptables 2023-01-17 13:48:39 -05:00