Commit Graph
100 Commits
Author SHA1 Message Date
weslambertandGitHub 44ae4604b5 Merge pull request #489 from Security-Onion-Solutions/fix/strelka-curly
Fix curly brace
2020-04-01 12:33:02 -04:00
weslambertandGitHub 7390063026 Fix curly brace 2020-04-01 12:32:29 -04:00
weslambertandGitHub 92c714ea4c Merge pull request #488 from Security-Onion-Solutions/fix/strelka_top
Update Eval for Strelka
2020-04-01 11:42:18 -04:00
weslambertandGitHub 2fcfb06ba5 Update Eval for Strelka 2020-04-01 11:41:56 -04:00
weslambertandGitHub 3001abc3ea Merge pull request #487 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
2020-04-01 11:32:22 -04:00
weslambertandGitHub f13093dc51 Add message rename 2020-04-01 11:31:57 -04:00
weslambertandGitHub 26efad1c45 Update Strelka log path 2020-04-01 11:30:02 -04:00
weslambertandGitHub 9f44a86ae4 Merge pull request #485 from Security-Onion-Solutions/strelka_enable
Enable Strelka via Setup
2020-04-01 10:08:09 -04:00
Wes Lambert 2164de97b5 Enable Strelka via Setup 2020-04-01 14:06:19 +00:00
weslambertandGitHub fd6832bf51 Merge pull request #483 from Security-Onion-Solutions/elastic_config
template and kibana config updates
2020-04-01 09:15:10 -04:00
Wes Lambert 33512eca2a template and kibana config updates 2020-04-01 13:14:13 +00:00
weslambertandGitHub a6b3e0e4a8 Merge pull request #482 from Security-Onion-Solutions/fix/strelka_config
add strelka index
2020-04-01 09:04:35 -04:00
Wes Lambert 6cc757e1de add strelka index 2020-04-01 13:02:36 +00:00
weslambertandGitHub d8f30a0240 Merge pull request #481 from Security-Onion-Solutions/fix/strelka_stuff
Fix/strelka stuff
2020-04-01 09:00:07 -04:00
Wes Lambert 70422809ec add category 2020-04-01 12:59:10 +00:00
Wes Lambert 9bbcc185aa change Strelka log location 2020-04-01 12:57:51 +00:00
weslambertandGitHub fd00cdf8f3 Merge pull request #473 from Security-Onion-Solutions/more_elastic_stuff
More elastic stuff
2020-03-30 20:41:56 -04:00
Wes Lambert 68138e009a update FB config 2020-03-31 00:37:58 +00:00
Wes Lambert 5226ec1560 update Kibana config/dashboards/etc 2020-03-31 00:37:17 +00:00
Wes Lambert eacd3c9bfd update zeek.common 2020-03-31 00:36:42 +00:00
weslambertandGitHub 9758563967 Merge pull request #470 from Security-Onion-Solutions/ecs_community_id
add community_id parsing for ingest
2020-03-30 11:51:05 -04:00
Wes Lambert ad50093315 add community_id parsing for ingest 2020-03-30 15:49:36 +00:00
weslambertandGitHub ee4e3c0659 Merge pull request #469 from Security-Onion-Solutions/fix/ingest_stuff
update wazuh fields and category
2020-03-30 10:24:43 -04:00
Wes Lambert 93c3c86e2f update wazuh fields and category 2020-03-30 14:24:01 +00:00
weslambertandGitHub b6db36723d Merge pull request #467 from Security-Onion-Solutions/fix/kibana_config_update
update Kibana json config
2020-03-30 10:21:18 -04:00
Wes Lambert 70bc35eb7e update Kibana json config 2020-03-30 14:20:06 +00:00
weslambertandGitHub b59fc5b77e Merge pull request #457 from Security-Onion-Solutions/fix/more_ossec_fields
fix ossec fields
2020-03-24 11:44:45 -04:00
Wes Lambert ef808875f4 fix ossec fields 2020-03-24 15:42:31 +00:00
weslambertandGitHub 239e0a0cb6 Merge pull request #456 from Security-Onion-Solutions/kibana_disable_telem
Disable telemetry
2020-03-24 10:20:51 -04:00
weslambertandGitHub fef0185e90 Disable telemetry 2020-03-24 10:18:39 -04:00
weslambertandGitHub 81a481022c Merge pull request #455 from Security-Onion-Solutions/fix/zeek_weird_ingest
add some more fields
2020-03-23 23:44:47 -04:00
Wes Lambert 083c588a87 add some more fields 2020-03-24 03:43:31 +00:00
weslambertandGitHub a01b0e44e1 Merge pull request #454 from Security-Onion-Solutions/es_template_fix
Add message field
2020-03-23 23:39:44 -04:00
weslambertandGitHub ece7e139f2 Add message 2020-03-23 23:39:15 -04:00
weslambertandGitHub 126913e41b Merge pull request #453 from Security-Onion-Solutions/fix/kibana_config_load
Fix/kibana config load
2020-03-23 23:24:09 -04:00
weslambertandGitHub f5e932ab58 Re-enable load script 2020-03-23 23:23:32 -04:00
weslambertandGitHub 1a44b744f7 Update so-kibana-config-load 2020-03-23 23:23:04 -04:00
weslambertandGitHub 1c153b9081 Fix path 2020-03-23 23:09:00 -04:00
weslambertandGitHub 5207ca71c9 Merge pull request #452 from Security-Onion-Solutions/fix/remove_dupe
Update init.sls
2020-03-23 17:07:50 -04:00
weslambertandGitHub 951a087c20 Update init.sls 2020-03-23 17:07:18 -04:00
weslambertandGitHub 2ae3ff7490 Merge pull request #451 from Security-Onion-Solutions/fix/saved_objects_config
Fix/saved objects config
2020-03-23 15:58:20 -04:00
Wes Lambert 0b6ff18a0d change default route 2020-03-23 19:57:41 +00:00
Wes Lambert fe0ab0965a move saved_objects 2020-03-23 19:55:07 +00:00
weslambertandGitHub 79feee1dd1 Merge pull request #449 from Security-Onion-Solutions/fix/kibana_master
Fix master and remark config load
2020-03-23 15:36:38 -04:00
weslambertandGitHub 8edecfceb9 Fix master and remark config load 2020-03-23 15:36:12 -04:00
weslambertandGitHub c8345753ac Merge pull request #447 from Security-Onion-Solutions/fix/kibana_state
Fix/kibana state
2020-03-23 15:17:04 -04:00
weslambertandGitHub 8e9cffad4a Update init.sls 2020-03-23 15:15:05 -04:00
weslambertandGitHub 2a5ab3492d Update init.sls 2020-03-23 15:14:42 -04:00
weslambertandGitHub 9c29f39cc1 Merge pull request #446 from Security-Onion-Solutions/fix/kibana_docker_image
Update init.sls
2020-03-23 14:50:54 -04:00
weslambertandGitHub 8d0659c200 Update init.sls 2020-03-23 14:50:34 -04:00
weslambertandGitHub c1e3a00d22 Merge pull request #445 from Security-Onion-Solutions/fix/kibana_config
more Kibana config
2020-03-23 14:12:11 -04:00
Wes Lambert a43154e0eb more Kibana config 2020-03-23 18:07:12 +00:00
weslambertandGitHub 029c1791a2 Merge pull request #438 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
2020-03-18 16:18:55 -04:00
Wes Lambert 7a71a2c459 removing mapping types 2020-03-18 20:17:57 +00:00
Wes Lambert 5072095eeb removing mapping types 2020-03-18 20:15:10 +00:00
Wes Lambert 150eaf59fd don't load FB template 2020-03-18 20:05:42 +00:00
weslambertandGitHub 8bd3c3f333 Merge pull request #435 from Security-Onion-Solutions/fix/index_names
fix index names
2020-03-18 12:45:01 -04:00
Wes Lambert fcc5c306ea fix index names 2020-03-18 16:42:06 +00:00
weslambertandGitHub 0d3280feb7 Merge pull request #432 from Security-Onion-Solutions/fix/template
fix strelka pattern
2020-03-18 09:52:24 -04:00
Wes Lambert 29a4932785 fix strelka pattern 2020-03-18 13:47:22 +00:00
weslambertandGitHub 597f746ccb Merge pull request #431 from Security-Onion-Solutions/fix/elastic_changes
Fix/elastic changes
2020-03-17 17:32:05 -04:00
Wes Lambert 4eac285fd9 change soversion 2020-03-17 21:31:19 +00:00
Wes Lambert 70f109af86 elastic changes 2020-03-17 21:29:28 +00:00
weslambertandGitHub bfefbe247f Merge pull request #430 from Security-Onion-Solutions/kibana_7_dark_mode
UI Dark Mode
2020-03-17 12:19:56 -04:00
weslambertandGitHub 272649f330 UI Dark Mode 2020-03-17 12:19:27 -04:00
weslambertandGitHub caeef9c903 Merge pull request #429 from Security-Onion-Solutions/kibana_7
Update config.json
2020-03-17 11:51:29 -04:00
weslambertandGitHub 113fbdb863 Update config.json 2020-03-17 11:50:53 -04:00
weslambertandGitHub 367626c65e Merge pull request #428 from Security-Onion-Solutions/more_ecs
More ecs
2020-03-17 11:23:19 -04:00
Wes Lambert a5ff21c528 remove agent field for non-Wazuh logs 2020-03-17 15:20:46 +00:00
Wes Lambert b80e7fedcb remove agent field for non-Wazuh logs 2020-03-17 15:20:31 +00:00
Wes Lambert 488858f8bc remove beat field removal 2020-03-17 15:19:08 +00:00
Wes Lambert 8bea56eccf change prospectors to inputs 2020-03-17 15:17:52 +00:00
Wes Lambert faea67c9cf update env vars 2020-03-17 15:17:13 +00:00
Wes Lambert 5ed3dbff39 Fix template name 2020-03-17 15:15:01 +00:00
weslambertandGitHub 85f5c53b51 Merge pull request #425 from Security-Onion-Solutions/fix/template_script
Fix/template script
2020-03-14 20:36:17 -04:00
Wes Lambert 81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00
Wes Lambert 26c4d453d3 Add ES templates script 2020-03-15 00:30:59 +00:00
weslambertandGitHub 775066489a Merge pull request #424 from Security-Onion-Solutions/ecs_parsing
ECS parsing
2020-03-14 08:11:15 -04:00
Wes Lambert 85c1873f4d switch logging to error 2020-03-14 12:10:06 +00:00
Wes Lambert b6ba8e483d update ES init 2020-03-14 12:06:32 +00:00
Wes Lambert d2016d3ff2 modify Filebeat config 2020-03-14 12:05:16 +00:00
Wes Lambert c52220330b modify pipelines 2020-03-14 12:03:32 +00:00
Wes Lambert d48c2723ba modify default templates 2020-03-14 12:02:52 +00:00
Wes Lambert 9fb3a47358 modify default templates 2020-03-14 12:02:42 +00:00
Wes Lambert ffc33b15e5 switch to Filebeat 2020-03-14 12:00:17 +00:00
weslambertandGitHub 7838018e3d Merge pull request #410 from Security-Onion-Solutions/feature/ECS
Feature/ecs
2020-03-11 08:23:22 -04:00
Wes Lambert 648b0ba790 remove old config 2020-03-11 12:14:22 +00:00
Wes Lambert 9ad16e8c71 upadte ingest config 2020-03-11 12:13:53 +00:00
Wes Lambert f9e4d218ec update config 2020-03-11 12:13:11 +00:00
Wes Lambert 70e78a0642 add renamed templates 2020-03-11 12:12:32 +00:00
Wes Lambert 84e54a8fae update Eval pillar 2020-03-11 12:09:34 +00:00
weslambertandGitHub aff51b6bb9 Merge pull request #407 from Security-Onion-Solutions/fix/bro_template
Fix/bro template
2020-03-09 09:19:37 -04:00
weslambertandGitHub 14dfec5365 Change to bro template 2020-03-09 09:18:57 -04:00
weslambertandGitHub 4a4c378327 Add bro template 2020-03-09 09:18:14 -04:00
weslambertandGitHub 47a7e025ee Merge pull request #403 from Security-Onion-Solutions/fix/zeek-extract
fix typo
2020-03-06 13:50:36 -05:00
Wes Lambert aeb298a818 fix typo 2020-03-06 18:49:29 +00:00
weslambertandGitHub 0f8fb7bd89 Merge pull request #402 from Security-Onion-Solutions/fix/node_init
fix repo name
2020-03-06 12:46:12 -05:00
Wes Lambert 84df1db201 fix repo name 2020-03-06 17:45:16 +00:00
weslambertandGitHub 21aa54690e Merge pull request #401 from Security-Onion-Solutions/fix/node_files
add files back
2020-03-06 12:34:07 -05:00
Wes Lambert ed8adcae5a add files back 2020-03-06 17:28:05 +00:00