Commit Graph

10883 Commits

Author SHA1 Message Date
Corey Ogburn 673f9cb544 Responding to Feedback 2025-09-08 09:13:24 -06:00
Corey Ogburn 0a3ff47008 Cleanup Annotations
Removed fields no longer need annotations.
2025-09-08 09:13:24 -06:00
Corey Ogburn 834e34128d Non-dev URL 2025-09-08 09:13:23 -06:00
Corey Ogburn 73776f8d11 Cleaning up New ES Indexes 2025-09-08 09:13:23 -06:00
Corey Ogburn 120e61e45c ClientParams
Removed investigation prompt from module settings and moved to client settings, added enabledInSoc.
2025-09-08 09:13:23 -06:00
Corey Ogburn fc2d450de0 Update Settings
The apiKey will be built off of the license rather than a new setting. The model is hardcoded for now at the AI Gateway level. We're going to use the investigationPrompt as a trigger for the feature being visible in the UI but by default will be blank for now.
2025-09-08 09:13:22 -06:00
Corey Ogburn cea4eaf081 Updated Assistant Mapping 2025-09-08 09:13:22 -06:00
Corey Ogburn b1753f86f9 New Message Structure 2025-09-08 09:13:22 -06:00
Corey Ogburn 6323fbf46b Content Object 2025-09-08 09:13:21 -06:00
Corey Ogburn ba601c39b3 Rough Go at New Mappings/Settings 2025-09-08 09:13:21 -06:00
Corey Ogburn ec27517bdd New Config Values
New config values with annotations and defaults.

Updated Nginx config to allow streaming requests to not be buffered on the way to the client.
2025-09-08 09:13:08 -06:00
Josh Brower f318a84c18 Update so-elastic-fleet-reset 2025-09-08 09:03:33 -04:00
Jason Ertel 6c196ea61a Merge branch '2.4/dev' into vlb2 2025-09-05 17:11:10 -04:00
Josh Patterson 4afc986f48 firewall and logstash pipeline for managerhype 2025-09-05 13:14:47 -04:00
reyesj2 348f9dcaec prevent multiple script instances using file lock 2025-09-05 10:01:24 -05:00
reyesj2 915b9e7bd7 use logrotate 2025-09-05 09:22:44 -05:00
reyesj2 dfec29d18e custom kquery 2025-09-04 15:37:28 -05:00
Josh Patterson a007fa6505 Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-09-03 09:52:49 -04:00
reyesj2 1a32a0897c Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/ea-alerter 2025-09-02 17:11:21 -05:00
reyesj2 e26310d172 elastic agent offline alerter
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2025-09-02 17:00:03 -05:00
Corey Ogburn df0b484b45 More Descriptive Description
Include instructions for how to add local lookups and a help link.
2025-09-02 15:07:13 -06:00
Corey Ogburn 2181cddf49 Move EnableReverseLookup
Move EnableReverseLookup and it's annotation from ClientParams to ServerConfig.
2025-09-02 14:09:55 -06:00
Jorge Reyes a2b6968cef Merge pull request #14975 from Security-Onion-Solutions/reyesj2/es8186
ES 8.18.6 upgrade
2025-09-02 10:14:33 -05:00
Josh Patterson 285fbc2783 Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-09-02 09:23:24 -04:00
Mike Reeves 19362fe5e5 Update so-combine-bond 2025-08-29 11:06:25 -04:00
Josh Patterson a7a81e9825 always manage script, only run it if bond0 exists 2025-08-29 11:05:42 -04:00
Josh Patterson f51cd008f2 only manage bond script if bond0 exists 2025-08-29 10:04:56 -04:00
reyesj2 a5675a79fe es 8.18.6 pipeline upd 2025-08-28 19:45:17 -05:00
reyesj2 1ea7b3c09f es 8.18.6 2025-08-28 18:27:56 -05:00
Jorge Reyes d9127a288f Merge pull request #14957 from Security-Onion-Solutions/reyesj2-patch-6
enable additional fleetnode state
2025-08-28 14:19:03 -05:00
Josh Patterson ebb78bc9bd Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-08-28 09:21:33 -04:00
Mike Reeves 153a99a002 Merge pull request #14971 from Security-Onion-Solutions/mikebond
and nic channel customization
2025-08-27 18:42:18 -04:00
Josh Patterson 0858160be2 support for modifying nic channels 2025-08-27 14:51:57 -04:00
Mike Reeves ccd79c814d Add script for bond0 channels 2025-08-27 09:53:37 -04:00
Josh Patterson ac2c044a94 Merge remote-tracking branch 'origin/2.4/dev' into vlb2 2025-08-26 14:55:06 -04:00
Josh Patterson e10d00d114 support for managerhype 2025-08-26 14:54:37 -04:00
Josh Patterson cbdd369a18 ensure x509 in mine 2025-08-25 08:39:55 -04:00
Jason Ertel 304985b61e Merge pull request #14959 from Security-Onion-Solutions/jertel/wip
rpt
2025-08-22 16:55:45 -04:00
Corey Ogburn d99857002d Improved Label
The underlying field is called "rulesetName" but for playbook repos we're not talking about rulesets. Improved the label for user experience.
2025-08-22 13:18:22 -06:00
Corey Ogburn 2a6c74917e Ruleset Name UiElement
Add a missing UiElement so all the repo fields are represented in the UI.
2025-08-22 13:00:17 -06:00
Jason Ertel 1357f19e48 update wording 2025-08-22 13:25:25 -04:00
Jason Ertel c91e9ea4e0 return to normalcy 2025-08-22 13:23:19 -04:00
Josh Patterson 65e7e56fbe Merge pull request #14950 from Security-Onion-Solutions/180soup
180 soup base
2025-08-21 09:50:53 -04:00
Josh Patterson 424fdff934 180 soup base 2025-08-21 09:43:30 -04:00
reyesj2 d77556c672 pcap dir 2025-08-21 08:25:48 -05:00
reyesj2 24be2f869b enable stig on fleet nodes 2025-08-20 12:08:50 -05:00
reyesj2 f8058a4a3a disable showing large stig profile update in salt log 2025-08-20 12:06:54 -05:00
Jason Ertel 77273449c9 fix typo 2025-08-18 16:58:52 -04:00
Jason Ertel 46e1f1bc5c fix typo 2025-08-18 16:12:34 -04:00
Jason Ertel 884bec7465 fix typo 2025-08-18 15:01:49 -04:00