 Jason Ertel
|
5a016312f6
|
switch MySQL 8 to use native password to avoid playbook incompatibility
|
2023-01-23 14:53:39 -05:00 |
|
 Wes
|
739c174898
|
Add scripts for starting, stopping, and restarting Sensoroni
|
2023-01-19 21:50:10 +00:00 |
|
|
Jason Ertel
|
79fb5dc525
|
prevent false success occurring when deleting the grafana dashboard
|
2023-01-19 14:19:55 -05:00 |
|
|
Jason Ertel
|
85b5d1b317
|
Merge branch '2.4/dev' into kilo
|
2023-01-19 12:53:36 -05:00 |
|
 Josh Brower
|
027c83b5ea
|
Merge pull request #9601 from Security-Onion-Solutions/disablecontainer
Fixup
|
2023-01-19 11:47:04 -05:00 |
|
|
Josh Brower
|
4369d2385b
|
Temp disable Elastic Registry Repo
|
2023-01-19 11:45:13 -05:00 |
|
|
Jason Ertel
|
35835edf96
|
Merge branch '2.4/dev' into kilo
|
2023-01-19 11:04:32 -05:00 |
|
|
weslambert
|
7d3f6121eb
|
Remove default "logs-*" template settings for now
|
2023-01-19 10:29:10 -05:00 |
|
|
Jason Ertel
|
05c7999df3
|
merge
|
2023-01-19 10:06:58 -05:00 |
|
|
Jason Ertel
|
05a6d702b0
|
Add logic to determine if setup succeeded and provide relevant output
|
2023-01-19 10:03:03 -05:00 |
|
|
Josh Brower
|
e83e54936e
|
Temp disable Elastic Registry Repo
|
2023-01-19 07:25:25 -05:00 |
|
|
weslambert
|
7a499c9051
|
Modify default 'logs-*' template priority
|
2023-01-18 17:24:07 -05:00 |
|
|
weslambert
|
1fed3cf474
|
Disable Kibana's native base path rewrite and add publicBaseUrl
|
2023-01-17 16:54:31 -05:00 |
|
 Josh Patterson
|
2842178396
|
Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall
fix iptables
|
2023-01-17 13:50:16 -05:00 |
|
|
m0duspwnens
|
aa858bab45
|
fix iptables
|
2023-01-17 13:48:39 -05:00 |
|
|
weslambert
|
73a4dae28e
|
Make sure Elastic Agent data streams do not use replicas
|
2023-01-13 16:10:44 -05:00 |
|
|
Josh Patterson
|
3efca0010a
|
Merge pull request #9573 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-13 12:41:58 -05:00 |
|
|
m0duspwnens
|
3653df4d5f
|
spell it right
|
2023-01-13 10:18:13 -05:00 |
|
|
m0duspwnens
|
6033e9a0de
|
use port_bindings from docker defaults in docker states
|
2023-01-13 10:15:10 -05:00 |
|
|
weslambert
|
7cba5626b7
|
Merge pull request #9570 from Security-Onion-Solutions/fix/elasticsearch_templates_elastic_agent
Change priority for Elastic Agent Elasticsearch index templates
|
2023-01-12 16:48:12 -05:00 |
|
|
m0duspwnens
|
a69b0951d3
|
add strelka containers
|
2023-01-12 16:47:34 -05:00 |
|
|
weslambert
|
654d869e3e
|
Change priority from 500 to 200 for Elastic Agent index templates to avoid collisions with other templates
|
2023-01-12 16:46:08 -05:00 |
|
|
m0duspwnens
|
d163d834d4
|
allow for binding ip and ports to different port number
|
2023-01-12 16:42:45 -05:00 |
|
|
weslambert
|
fb8d8ea972
|
Update Elasticsearch index template for Kratos
|
2023-01-12 15:31:41 -05:00 |
|
|
weslambert
|
9416552338
|
Don't set the Kratos index explicitly
|
2023-01-12 15:25:35 -05:00 |
|
|
weslambert
|
66f9a06458
|
Merge pull request #9566 from Security-Onion-Solutions/fix/elastic_fleet_integration_policy_load
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
|
2023-01-11 16:17:40 -05:00 |
|
|
Wes
|
0e437f84e7
|
Add back echo statement to print the import policy being loaded
|
2023-01-11 21:13:30 +00:00 |
|
|
Wes
|
ea01e68846
|
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
|
2023-01-11 21:01:31 +00:00 |
|
|
Josh Patterson
|
add71cbdee
|
Merge pull request #9565 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-11 15:04:25 -05:00 |
|
|
m0duspwnens
|
80f65fcd62
|
remove 514/tcp from filebeat for now
|
2023-01-11 14:54:05 -05:00 |
|
 Mike Reeves
|
66924b63a7
|
Update 9999_output_redis.conf.jinja
|
2023-01-11 14:53:16 -05:00 |
|
|
Mike Reeves
|
bdaed849ea
|
Update 0900_input_redis.conf.jinja
|
2023-01-11 14:52:32 -05:00 |
|
|
m0duspwnens
|
0d45c1583e
|
add so-filebeat docker container ports and add to standalone
|
2023-01-11 14:48:20 -05:00 |
|
|
m0duspwnens
|
81e07997f0
|
add so-elastic-fleet docker container ports and add to standalone
|
2023-01-11 14:28:35 -05:00 |
|
|
weslambert
|
4391c22335
|
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
|
2023-01-11 12:23:50 -05:00 |
|
|
weslambert
|
b3e0183e39
|
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
|
2023-01-11 12:19:06 -05:00 |
|
|
Wes
|
52b620b137
|
Add additional conditional logic for Filebeat and disable Filebeat
|
2023-01-11 14:10:11 +00:00 |
|
|
Wes
|
33e2affb1d
|
Remove newlines from end of Syslog processor definitions
|
2023-01-11 14:08:28 +00:00 |
|
|
Wes
|
c3b83f1fc8
|
Update template settings to use data streams
|
2023-01-11 14:03:11 +00:00 |
|
|
Wes
|
5062dd2873
|
Suricata Elasticsearch ingest node pipeline changes - set 'alert' dataset
|
2023-01-11 14:02:09 +00:00 |
|
|
Wes
|
2e886d0c55
|
Remove data_index_name processor since we are using data streams
|
2023-01-11 13:58:38 +00:00 |
|
|
Wes
|
5d86edeed4
|
Modify Logstash Elastic Agent output to accomodate for events with and without 'metadata.pipeline'
|
2023-01-11 13:57:32 +00:00 |
|
|
Wes
|
caf0ea6b53
|
Add Elastic Agent policy view script
|
2023-01-11 13:56:21 +00:00 |
|
|
Wes
|
a146f1134e
|
Add Elastic Agent utility scripts
|
2023-01-11 13:54:42 +00:00 |
|
|
Mike Reeves
|
7cecc910d5
|
Merge pull request #9458 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-11 08:49:15 -05:00 |
|
|
m0duspwnens
|
76fff1b1e0
|
add logstash ports
|
2023-01-10 17:02:54 -05:00 |
|
 Doug Burks
|
c15db73561
|
Avoid unnecessary Zeek processes in Import Mode
|
2023-01-10 16:48:47 -05:00 |
|
|
Doug Burks
|
554754421c
|
Avoid unecessary Suricata processes in Import Mode
|
2023-01-10 16:48:06 -05:00 |
|
|
Doug Burks
|
322efa304a
|
Avoid unnecessary processes in Import Mode
|
2023-01-10 16:47:18 -05:00 |
|
|
Mike Reeves
|
ab3a7abcc7
|
run restore each time
|
2023-01-10 16:08:44 -05:00 |
|