 weslambertandGitHub
|
44ae4604b5
|
Merge pull request #489 from Security-Onion-Solutions/fix/strelka-curly
Fix curly brace
|
2020-04-01 12:33:02 -04:00 |
|
 weslambertandGitHub
|
7390063026
|
Fix curly brace
|
2020-04-01 12:32:29 -04:00 |
|
 weslambertandGitHub
|
92c714ea4c
|
Merge pull request #488 from Security-Onion-Solutions/fix/strelka_top
Update Eval for Strelka
|
2020-04-01 11:42:18 -04:00 |
|
 weslambertandGitHub
|
2fcfb06ba5
|
Update Eval for Strelka
|
2020-04-01 11:41:56 -04:00 |
|
 weslambertandGitHub
|
3001abc3ea
|
Merge pull request #487 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
|
2020-04-01 11:32:22 -04:00 |
|
 weslambertandGitHub
|
f13093dc51
|
Add message rename
|
2020-04-01 11:31:57 -04:00 |
|
 weslambertandGitHub
|
26efad1c45
|
Update Strelka log path
|
2020-04-01 11:30:02 -04:00 |
|
 weslambertandGitHub
|
9f44a86ae4
|
Merge pull request #485 from Security-Onion-Solutions/strelka_enable
Enable Strelka via Setup
|
2020-04-01 10:08:09 -04:00 |
|
Wes Lambert
|
2164de97b5
|
Enable Strelka via Setup
|
2020-04-01 14:06:19 +00:00 |
|
 weslambertandGitHub
|
fd6832bf51
|
Merge pull request #483 from Security-Onion-Solutions/elastic_config
template and kibana config updates
|
2020-04-01 09:15:10 -04:00 |
|
Wes Lambert
|
33512eca2a
|
template and kibana config updates
|
2020-04-01 13:14:13 +00:00 |
|
 weslambertandGitHub
|
a6b3e0e4a8
|
Merge pull request #482 from Security-Onion-Solutions/fix/strelka_config
add strelka index
|
2020-04-01 09:04:35 -04:00 |
|
Wes Lambert
|
6cc757e1de
|
add strelka index
|
2020-04-01 13:02:36 +00:00 |
|
 weslambertandGitHub
|
d8f30a0240
|
Merge pull request #481 from Security-Onion-Solutions/fix/strelka_stuff
Fix/strelka stuff
|
2020-04-01 09:00:07 -04:00 |
|
Wes Lambert
|
70422809ec
|
add category
|
2020-04-01 12:59:10 +00:00 |
|
Wes Lambert
|
9bbcc185aa
|
change Strelka log location
|
2020-04-01 12:57:51 +00:00 |
|
 weslambertandGitHub
|
fd00cdf8f3
|
Merge pull request #473 from Security-Onion-Solutions/more_elastic_stuff
More elastic stuff
|
2020-03-30 20:41:56 -04:00 |
|
Wes Lambert
|
68138e009a
|
update FB config
|
2020-03-31 00:37:58 +00:00 |
|
Wes Lambert
|
5226ec1560
|
update Kibana config/dashboards/etc
|
2020-03-31 00:37:17 +00:00 |
|
Wes Lambert
|
eacd3c9bfd
|
update zeek.common
|
2020-03-31 00:36:42 +00:00 |
|
 weslambertandGitHub
|
9758563967
|
Merge pull request #470 from Security-Onion-Solutions/ecs_community_id
add community_id parsing for ingest
|
2020-03-30 11:51:05 -04:00 |
|
Wes Lambert
|
ad50093315
|
add community_id parsing for ingest
|
2020-03-30 15:49:36 +00:00 |
|
 weslambertandGitHub
|
ee4e3c0659
|
Merge pull request #469 from Security-Onion-Solutions/fix/ingest_stuff
update wazuh fields and category
|
2020-03-30 10:24:43 -04:00 |
|
Wes Lambert
|
93c3c86e2f
|
update wazuh fields and category
|
2020-03-30 14:24:01 +00:00 |
|
 weslambertandGitHub
|
b6db36723d
|
Merge pull request #467 from Security-Onion-Solutions/fix/kibana_config_update
update Kibana json config
|
2020-03-30 10:21:18 -04:00 |
|
Wes Lambert
|
70bc35eb7e
|
update Kibana json config
|
2020-03-30 14:20:06 +00:00 |
|
 weslambertandGitHub
|
b59fc5b77e
|
Merge pull request #457 from Security-Onion-Solutions/fix/more_ossec_fields
fix ossec fields
|
2020-03-24 11:44:45 -04:00 |
|
Wes Lambert
|
ef808875f4
|
fix ossec fields
|
2020-03-24 15:42:31 +00:00 |
|
 weslambertandGitHub
|
239e0a0cb6
|
Merge pull request #456 from Security-Onion-Solutions/kibana_disable_telem
Disable telemetry
|
2020-03-24 10:20:51 -04:00 |
|
 weslambertandGitHub
|
fef0185e90
|
Disable telemetry
|
2020-03-24 10:18:39 -04:00 |
|
 weslambertandGitHub
|
81a481022c
|
Merge pull request #455 from Security-Onion-Solutions/fix/zeek_weird_ingest
add some more fields
|
2020-03-23 23:44:47 -04:00 |
|
Wes Lambert
|
083c588a87
|
add some more fields
|
2020-03-24 03:43:31 +00:00 |
|
 weslambertandGitHub
|
a01b0e44e1
|
Merge pull request #454 from Security-Onion-Solutions/es_template_fix
Add message field
|
2020-03-23 23:39:44 -04:00 |
|
 weslambertandGitHub
|
ece7e139f2
|
Add message
|
2020-03-23 23:39:15 -04:00 |
|
 weslambertandGitHub
|
126913e41b
|
Merge pull request #453 from Security-Onion-Solutions/fix/kibana_config_load
Fix/kibana config load
|
2020-03-23 23:24:09 -04:00 |
|
 weslambertandGitHub
|
f5e932ab58
|
Re-enable load script
|
2020-03-23 23:23:32 -04:00 |
|
 weslambertandGitHub
|
1a44b744f7
|
Update so-kibana-config-load
|
2020-03-23 23:23:04 -04:00 |
|
 weslambertandGitHub
|
1c153b9081
|
Fix path
|
2020-03-23 23:09:00 -04:00 |
|
 weslambertandGitHub
|
5207ca71c9
|
Merge pull request #452 from Security-Onion-Solutions/fix/remove_dupe
Update init.sls
|
2020-03-23 17:07:50 -04:00 |
|
 weslambertandGitHub
|
951a087c20
|
Update init.sls
|
2020-03-23 17:07:18 -04:00 |
|
 weslambertandGitHub
|
2ae3ff7490
|
Merge pull request #451 from Security-Onion-Solutions/fix/saved_objects_config
Fix/saved objects config
|
2020-03-23 15:58:20 -04:00 |
|
Wes Lambert
|
0b6ff18a0d
|
change default route
|
2020-03-23 19:57:41 +00:00 |
|
Wes Lambert
|
fe0ab0965a
|
move saved_objects
|
2020-03-23 19:55:07 +00:00 |
|
 weslambertandGitHub
|
79feee1dd1
|
Merge pull request #449 from Security-Onion-Solutions/fix/kibana_master
Fix master and remark config load
|
2020-03-23 15:36:38 -04:00 |
|
 weslambertandGitHub
|
8edecfceb9
|
Fix master and remark config load
|
2020-03-23 15:36:12 -04:00 |
|
 weslambertandGitHub
|
c8345753ac
|
Merge pull request #447 from Security-Onion-Solutions/fix/kibana_state
Fix/kibana state
|
2020-03-23 15:17:04 -04:00 |
|
 weslambertandGitHub
|
8e9cffad4a
|
Update init.sls
|
2020-03-23 15:15:05 -04:00 |
|
 weslambertandGitHub
|
2a5ab3492d
|
Update init.sls
|
2020-03-23 15:14:42 -04:00 |
|
 weslambertandGitHub
|
9c29f39cc1
|
Merge pull request #446 from Security-Onion-Solutions/fix/kibana_docker_image
Update init.sls
|
2020-03-23 14:50:54 -04:00 |
|
 weslambertandGitHub
|
8d0659c200
|
Update init.sls
|
2020-03-23 14:50:34 -04:00 |
|
 weslambertandGitHub
|
c1e3a00d22
|
Merge pull request #445 from Security-Onion-Solutions/fix/kibana_config
more Kibana config
|
2020-03-23 14:12:11 -04:00 |
|
Wes Lambert
|
a43154e0eb
|
more Kibana config
|
2020-03-23 18:07:12 +00:00 |
|
 weslambertandGitHub
|
029c1791a2
|
Merge pull request #438 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
|
2020-03-18 16:18:55 -04:00 |
|
Wes Lambert
|
7a71a2c459
|
removing mapping types
|
2020-03-18 20:17:57 +00:00 |
|
Wes Lambert
|
5072095eeb
|
removing mapping types
|
2020-03-18 20:15:10 +00:00 |
|
Wes Lambert
|
150eaf59fd
|
don't load FB template
|
2020-03-18 20:05:42 +00:00 |
|
 weslambertandGitHub
|
8bd3c3f333
|
Merge pull request #435 from Security-Onion-Solutions/fix/index_names
fix index names
|
2020-03-18 12:45:01 -04:00 |
|
Wes Lambert
|
fcc5c306ea
|
fix index names
|
2020-03-18 16:42:06 +00:00 |
|
 weslambertandGitHub
|
0d3280feb7
|
Merge pull request #432 from Security-Onion-Solutions/fix/template
fix strelka pattern
|
2020-03-18 09:52:24 -04:00 |
|
Wes Lambert
|
29a4932785
|
fix strelka pattern
|
2020-03-18 13:47:22 +00:00 |
|
 weslambertandGitHub
|
597f746ccb
|
Merge pull request #431 from Security-Onion-Solutions/fix/elastic_changes
Fix/elastic changes
|
2020-03-17 17:32:05 -04:00 |
|
Wes Lambert
|
4eac285fd9
|
change soversion
|
2020-03-17 21:31:19 +00:00 |
|
Wes Lambert
|
70f109af86
|
elastic changes
|
2020-03-17 21:29:28 +00:00 |
|
 weslambertandGitHub
|
bfefbe247f
|
Merge pull request #430 from Security-Onion-Solutions/kibana_7_dark_mode
UI Dark Mode
|
2020-03-17 12:19:56 -04:00 |
|
 weslambertandGitHub
|
272649f330
|
UI Dark Mode
|
2020-03-17 12:19:27 -04:00 |
|
 weslambertandGitHub
|
caeef9c903
|
Merge pull request #429 from Security-Onion-Solutions/kibana_7
Update config.json
|
2020-03-17 11:51:29 -04:00 |
|
 weslambertandGitHub
|
113fbdb863
|
Update config.json
|
2020-03-17 11:50:53 -04:00 |
|
 weslambertandGitHub
|
367626c65e
|
Merge pull request #428 from Security-Onion-Solutions/more_ecs
More ecs
|
2020-03-17 11:23:19 -04:00 |
|
Wes Lambert
|
a5ff21c528
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:46 +00:00 |
|
Wes Lambert
|
b80e7fedcb
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:31 +00:00 |
|
Wes Lambert
|
488858f8bc
|
remove beat field removal
|
2020-03-17 15:19:08 +00:00 |
|
Wes Lambert
|
8bea56eccf
|
change prospectors to inputs
|
2020-03-17 15:17:52 +00:00 |
|
Wes Lambert
|
faea67c9cf
|
update env vars
|
2020-03-17 15:17:13 +00:00 |
|
Wes Lambert
|
5ed3dbff39
|
Fix template name
|
2020-03-17 15:15:01 +00:00 |
|
 weslambertandGitHub
|
85f5c53b51
|
Merge pull request #425 from Security-Onion-Solutions/fix/template_script
Fix/template script
|
2020-03-14 20:36:17 -04:00 |
|
Wes Lambert
|
81da44b85d
|
fix Logstash Eval SLS
|
2020-03-15 00:32:29 +00:00 |
|
Wes Lambert
|
26c4d453d3
|
Add ES templates script
|
2020-03-15 00:30:59 +00:00 |
|
 weslambertandGitHub
|
775066489a
|
Merge pull request #424 from Security-Onion-Solutions/ecs_parsing
ECS parsing
|
2020-03-14 08:11:15 -04:00 |
|
Wes Lambert
|
85c1873f4d
|
switch logging to error
|
2020-03-14 12:10:06 +00:00 |
|
Wes Lambert
|
b6ba8e483d
|
update ES init
|
2020-03-14 12:06:32 +00:00 |
|
Wes Lambert
|
d2016d3ff2
|
modify Filebeat config
|
2020-03-14 12:05:16 +00:00 |
|
Wes Lambert
|
c52220330b
|
modify pipelines
|
2020-03-14 12:03:32 +00:00 |
|
Wes Lambert
|
d48c2723ba
|
modify default templates
|
2020-03-14 12:02:52 +00:00 |
|
Wes Lambert
|
9fb3a47358
|
modify default templates
|
2020-03-14 12:02:42 +00:00 |
|
Wes Lambert
|
ffc33b15e5
|
switch to Filebeat
|
2020-03-14 12:00:17 +00:00 |
|
 weslambertandGitHub
|
7838018e3d
|
Merge pull request #410 from Security-Onion-Solutions/feature/ECS
Feature/ecs
|
2020-03-11 08:23:22 -04:00 |
|
Wes Lambert
|
648b0ba790
|
remove old config
|
2020-03-11 12:14:22 +00:00 |
|
Wes Lambert
|
9ad16e8c71
|
upadte ingest config
|
2020-03-11 12:13:53 +00:00 |
|
Wes Lambert
|
f9e4d218ec
|
update config
|
2020-03-11 12:13:11 +00:00 |
|
Wes Lambert
|
70e78a0642
|
add renamed templates
|
2020-03-11 12:12:32 +00:00 |
|
Wes Lambert
|
84e54a8fae
|
update Eval pillar
|
2020-03-11 12:09:34 +00:00 |
|
 weslambertandGitHub
|
aff51b6bb9
|
Merge pull request #407 from Security-Onion-Solutions/fix/bro_template
Fix/bro template
|
2020-03-09 09:19:37 -04:00 |
|
 weslambertandGitHub
|
14dfec5365
|
Change to bro template
|
2020-03-09 09:18:57 -04:00 |
|
 weslambertandGitHub
|
4a4c378327
|
Add bro template
|
2020-03-09 09:18:14 -04:00 |
|
 weslambertandGitHub
|
47a7e025ee
|
Merge pull request #403 from Security-Onion-Solutions/fix/zeek-extract
fix typo
|
2020-03-06 13:50:36 -05:00 |
|
Wes Lambert
|
aeb298a818
|
fix typo
|
2020-03-06 18:49:29 +00:00 |
|
 weslambertandGitHub
|
0f8fb7bd89
|
Merge pull request #402 from Security-Onion-Solutions/fix/node_init
fix repo name
|
2020-03-06 12:46:12 -05:00 |
|
Wes Lambert
|
84df1db201
|
fix repo name
|
2020-03-06 17:45:16 +00:00 |
|
 weslambertandGitHub
|
21aa54690e
|
Merge pull request #401 from Security-Onion-Solutions/fix/node_files
add files back
|
2020-03-06 12:34:07 -05:00 |
|
Wes Lambert
|
ed8adcae5a
|
add files back
|
2020-03-06 17:28:05 +00:00 |
|