Commit Graph

2501 Commits

Author SHA1 Message Date
weslambert
caeef9c903 Merge pull request #429 from Security-Onion-Solutions/kibana_7
Update config.json
2020-03-17 11:51:29 -04:00
weslambert
113fbdb863 Update config.json 2020-03-17 11:50:53 -04:00
weslambert
367626c65e Merge pull request #428 from Security-Onion-Solutions/more_ecs
More ecs
2020-03-17 11:23:19 -04:00
Wes Lambert
a5ff21c528 remove agent field for non-Wazuh logs 2020-03-17 15:20:46 +00:00
Wes Lambert
b80e7fedcb remove agent field for non-Wazuh logs 2020-03-17 15:20:31 +00:00
Wes Lambert
488858f8bc remove beat field removal 2020-03-17 15:19:08 +00:00
Wes Lambert
8bea56eccf change prospectors to inputs 2020-03-17 15:17:52 +00:00
Wes Lambert
faea67c9cf update env vars 2020-03-17 15:17:13 +00:00
Wes Lambert
5ed3dbff39 Fix template name 2020-03-17 15:15:01 +00:00
Josh Patterson
2e72816d2a Merge pull request #427 from Security-Onion-Solutions/quickfix/hostnames
ensure name uniformity for elascticsearch and telegraf/grafana
2020-03-17 09:19:27 -04:00
m0duspwnens
cd84f87581 ensure name uniformity for elascticsearch and telegraf/grafana 2020-03-17 09:18:00 -04:00
Josh Patterson
ad0aa85e79 Merge pull request #426 from Security-Onion-Solutions/issue/97
add tojson to dict passed into zeekctl
2020-03-16 10:28:49 -04:00
m0duspwnens
20a6a79551 add tojson to dict passed into zeekctl 2020-03-16 10:28:12 -04:00
weslambert
85f5c53b51 Merge pull request #425 from Security-Onion-Solutions/fix/template_script
Fix/template script
2020-03-14 20:36:17 -04:00
Wes Lambert
81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00
Wes Lambert
26c4d453d3 Add ES templates script 2020-03-15 00:30:59 +00:00
weslambert
775066489a Merge pull request #424 from Security-Onion-Solutions/ecs_parsing
ECS parsing
2020-03-14 08:11:15 -04:00
Wes Lambert
85c1873f4d switch logging to error 2020-03-14 12:10:06 +00:00
Wes Lambert
b6ba8e483d update ES init 2020-03-14 12:06:32 +00:00
Wes Lambert
d2016d3ff2 modify Filebeat config 2020-03-14 12:05:16 +00:00
Wes Lambert
c52220330b modify pipelines 2020-03-14 12:03:32 +00:00
Wes Lambert
d48c2723ba modify default templates 2020-03-14 12:02:52 +00:00
Wes Lambert
9fb3a47358 modify default templates 2020-03-14 12:02:42 +00:00
Wes Lambert
ffc33b15e5 switch to Filebeat 2020-03-14 12:00:17 +00:00
Josh Patterson
a9d286b90f Merge pull request #423 from Security-Onion-Solutions/issue/97
allow all zeekctl configuration options to be defined
2020-03-13 16:12:54 -04:00
m0duspwnens
2bda1f4beb remove whitespace 2020-03-13 16:12:16 -04:00
m0duspwnens
1db9692c6b allow all zeekctl configuration options to be defined - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 16:10:42 -04:00
Josh Patterson
1c4429613d Merge pull request #422 from Security-Onion-Solutions/issue/97
add option to compress archived logs for zeekctl
2020-03-13 15:06:34 -04:00
m0duspwnens
a21ffaecc8 add option to compress archived logs for zeekctl - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 15:05:25 -04:00
Josh Patterson
b18f4eb720 Merge pull request #421 from Security-Onion-Solutions/issue/97
Issue/97
2020-03-13 14:52:34 -04:00
m0duspwnens
da8811bc87 restart zeek docker if zeekctl.cfg changes 2020-03-13 14:44:56 -04:00
m0duspwnens
1b7e22d5bd fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 14:41:16 -04:00
m0duspwnens
8e82633772 fix missing : in playbook state 2020-03-13 13:45:29 -04:00
m0duspwnens
f9cf04e14e fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 13:42:28 -04:00
m0duspwnens
bc6aab5b22 add zeekctl.cfg docker file bind 2020-03-13 13:23:27 -04:00
m0duspwnens
3aa48b1a23 first go at managing zeekctl.cfg - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 13:20:48 -04:00
Josh Patterson
762841b14a Merge pull request #417 from Security-Onion-Solutions/issue/134
add salt cron identifiers
2020-03-13 08:43:12 -04:00
m0duspwnens
7ea0b2c284 add salt cron identifiers - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/134 2020-03-13 08:38:45 -04:00
Josh Patterson
1a8c8e4c17 Merge pull request #416 from Security-Onion-Solutions/issue/362
fix spacing for titles in grafana dashboard
2020-03-13 08:10:41 -04:00
m0duspwnens
2d91851c34 fix spacing for titles in grafana dashboard - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/362 2020-03-13 08:08:51 -04:00
Josh Patterson
8b0509aa4a Merge pull request #415 from Security-Onion-Solutions/issue/136
Issue/136
2020-03-12 17:46:38 -04:00
m0duspwnens
804a87eb21 append role to minion id and use it to target in top - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/136 2020-03-12 17:42:32 -04:00
Mike Reeves
efda3b9295 Merge pull request #412 from Security-Onion-Solutions/feature/ubuntu18
Feature/ubuntu18
2020-03-11 12:03:55 -04:00
Mike Reeves
fa9dbf7316 Merge branch 'dev' into feature/ubuntu18 2020-03-11 12:03:46 -04:00
Mike Reeves
16d549ce03 Fix mysql 2020-03-11 10:58:54 -04:00
weslambert
7838018e3d Merge pull request #410 from Security-Onion-Solutions/feature/ECS
Feature/ecs
2020-03-11 08:23:22 -04:00
Wes Lambert
648b0ba790 remove old config 2020-03-11 12:14:22 +00:00
Wes Lambert
9ad16e8c71 upadte ingest config 2020-03-11 12:13:53 +00:00
Wes Lambert
f9e4d218ec update config 2020-03-11 12:13:11 +00:00
Wes Lambert
70e78a0642 add renamed templates 2020-03-11 12:12:32 +00:00