Commit Graph

11761 Commits

Author SHA1 Message Date
Josh Brower
f7be4ba31c Remove host field from NIDS logs 2023-03-13 14:07:17 -04:00
Josh Brower
126add7ddd Merge pull request #9922 from Security-Onion-Solutions/2.4/fieldfixes
auto-apply firewall rules
2023-03-13 12:00:28 -04:00
Josh Brower
b3a2680847 auto-apply firewall rules 2023-03-13 11:41:36 -04:00
weslambert
1774d16d9a Merge pull request #9921 from Security-Onion-Solutions/fix/elasticsearch_template_data_stream_configuration
Move data stream configuration outside of ILM policy definition
2023-03-13 09:29:42 -04:00
Wes
e105e56fac Move data stream configuration outside of ILM policy definition 2023-03-13 13:27:02 +00:00
m0duspwnens
58343e39fa 2.4 strelka 2023-03-10 17:32:14 -05:00
weslambert
a844819261 Merge pull request #9919 from Security-Onion-Solutions/fix/elasticsearch_ilm_policy_elastic_agent_default
Add index lifecycle management policy definitions for default Elastic Agent data streams
2023-03-10 17:02:27 -05:00
weslambert
16d9478196 Add index lifecycle management policy definitions for default Elastic Agent data streams 2023-03-10 16:54:47 -05:00
Jason Ertel
5804409fcf Merge branch '2.4/dev' into kilo 2023-03-10 15:13:57 -05:00
Jason Ertel
5301f442f9 distributed testing 2023-03-09 19:31:04 -05:00
Jason Ertel
ed8a23cedc distributed testing 2023-03-09 17:01:38 -05:00
Jason Ertel
0ee870a199 cleanup unnecessary code 2023-03-09 15:40:51 -05:00
Jason Ertel
23b344bf14 distributed testing 2023-03-09 15:04:42 -05:00
Josh Brower
2fe8668f1b Merge pull request #9891 from Security-Onion-Solutions/2.4/huntqueries
Initial updates for 2.4 fieldnames
2023-03-09 14:37:50 -05:00
Josh Brower
73abf8dbfd Generic host dashboard 2023-03-09 14:32:52 -05:00
Jason Ertel
894a20b3ad autodetect manager IP 2023-03-09 12:58:51 -05:00
Jason Ertel
ecc300197d autodetect manager IP 2023-03-09 12:11:27 -05:00
Jason Ertel
b1f201ca87 autodetect manager IP 2023-03-09 12:05:42 -05:00
Jason Ertel
a4409b2979 autodetect manager IP 2023-03-09 11:47:35 -05:00
Jason Ertel
b6ce9f489a autodetect manager IP 2023-03-09 11:02:01 -05:00
Josh Brower
1493806040 Change host dashboard titles 2023-03-08 17:03:02 -05:00
Josh Brower
a5c89bfaa1 update sysmon dashboards 2023-03-08 16:49:34 -05:00
Jason Ertel
b9e3024521 fix user sync issue after setup finishes 2023-03-08 15:10:31 -05:00
Josh Patterson
d75866caec Merge pull request #9912 from Security-Onion-Solutions/2.4/heavynode
2.4/heavynode
2023-03-08 14:11:43 -05:00
m0duspwnens
61879a8d33 merge with dev and resolve conflicts in salt/top 2023-03-08 09:04:09 -05:00
Jason Ertel
0f456e6ecd Merge branch '2.4/dev' into kilo 2023-03-07 16:18:30 -05:00
weslambert
7ad34ee8d7 Merge pull request #9910 from Security-Onion-Solutions/fix/curator_so_curator_cluster_warm
Remove reference to 'so-curator-cluster-warm' script since it has been removed
2023-03-07 16:18:05 -05:00
weslambert
2d7ce41a70 Remove reference to 'so-curator-cluster-warm' script since it has been removed 2023-03-07 16:16:55 -05:00
weslambert
a738c7c36d Merge pull request #9907 from Security-Onion-Solutions/fix/curator_global_delete_action
Add the new Security Onion index format to the global delete action file for Curator
2023-03-07 16:03:28 -05:00
Josh Brower
6f82cf3807 Merge pull request #9906 from Security-Onion-Solutions/2.4/setupfix
Remove EA install from manager highstates
2023-03-07 15:33:34 -05:00
Jason Ertel
a3e05d782e Merge branch '2.4/dev' into kilo 2023-03-07 15:26:01 -05:00
weslambert
e93c052d34 Add the new index format to the global delete action file for Curator 2023-03-07 15:21:53 -05:00
Josh Brower
fd2312a2ac Remove EA install from manager highstates 2023-03-07 15:13:35 -05:00
Jason Ertel
4f3cb2eb3d Clarify playbook load time log message 2023-03-07 14:42:10 -05:00
weslambert
8c79d7e40d Merge pull request #9905 from Security-Onion-Solutions/fix/curator_new_action_files
Add New Curator Action Files
2023-03-07 12:44:25 -05:00
Wes
f50639d2d2 Fix import and syslog actions 2023-03-07 17:41:48 +00:00
Wes
26c9813276 Add keys for new Curator actions to defaults.yaml 2023-03-07 17:29:07 +00:00
Wes
88d98af243 Add new Curator action files to Curator close and delete scripts 2023-03-07 17:21:03 +00:00
Wes
d636546871 Add new Curator action files 2023-03-07 17:15:25 +00:00
weslambert
f0b7a75ae8 Merge pull request #9904 from Security-Onion-Solutions/fix/curator_clean_up_action_files
Clean Up Old Curator Action Files
2023-03-07 11:52:28 -05:00
Wes
073054b447 Remove 'so-curator-cluster-warm' and remove unncessary Curator default values 2023-03-07 16:21:55 +00:00
Wes
df94e830c5 Remove unnecessary Curator action files 2023-03-07 16:15:41 +00:00
m0duspwnens
2767d4bee3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-03-07 10:36:12 -05:00
m0duspwnens
14aa9ac5c9 apply elastic-fleet state to managers 2023-03-07 10:35:49 -05:00
weslambert
deda0fa279 Merge pull request #9902 from Security-Onion-Solutions/fix/so-status_curator
Add Curator to so-status Output
2023-03-07 10:17:14 -05:00
Wes
086b3bf528 Add Curator to so-status output 2023-03-07 15:14:53 +00:00
Jason Ertel
66bb829505 if -i, either success or failure must be present 2023-03-06 22:18:08 -05:00
Jason Ertel
b641dc37b6 use high error code to flag an unrecoverable error 2023-03-06 18:56:04 -05:00
Jason Ertel
f77068f73f setup and so-verify/so-status interop 2023-03-06 18:37:37 -05:00
m0duspwnens
691080de88 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-03-06 16:04:14 -05:00