 William Wernert
|
4f39cd1d7f
|
Add logscan dynamic object to so-common template mappings
|
2021-07-30 16:02:02 -04:00 |
|
|
William Wernert
|
2a6277c0c3
|
Fix field names in logscan pipeline
|
2021-07-30 15:46:39 -04:00 |
|
|
William Wernert
|
33bd6aed20
|
Fix logscan pipeline on eval
* Rename logscan pipeline to logscan.alert
* Add module to indices array in filebeat.yml
|
2021-07-30 14:41:15 -04:00 |
|
|
William Wernert
|
b9980c9d30
|
Fix pipeline name
|
2021-07-30 13:09:09 -04:00 |
|
|
William Wernert
|
01bb94514c
|
Correct mod_so_status to only act on single string
|
2021-07-30 11:05:48 -04:00 |
|
|
William Wernert
|
d71967ea1d
|
Fix incorrect writing of so-status.conf
|
2021-07-30 10:28:39 -04:00 |
|
|
William Wernert
|
0b06d0bfdb
|
Merge branch 'dev' into foxtrot
|
2021-07-29 15:15:25 -04:00 |
|
|
William Wernert
|
b2a83018ba
|
Remove or run logscan based on enabled bool
|
2021-07-29 15:14:54 -04:00 |
|
|
William Wernert
|
ba265d94f4
|
Change default value in learn init to a dict where approriate
|
2021-07-29 15:14:28 -04:00 |
|
 Mike Reeves
|
af7b314cfe
|
Merge pull request #4993 from Security-Onion-Solutions/kilo
Merge 2.3.61 MSEARCH Hotfix into dev
|
2021-07-29 15:02:51 -04:00 |
|
 Jason Ertel
|
4c6447a3da
|
merge 2.3.61 MSEARCH hotfix into dev
|
2021-07-29 15:00:58 -04:00 |
|
|
William Wernert
|
b30f771fa2
|
Set write_needed flag correctly, include newline in so-status.conf string
|
2021-07-29 14:59:26 -04:00 |
|
|
Mike Reeves
|
837c0402a0
|
Merge pull request #4989 from Security-Onion-Solutions/hotfix/2.3.61
Hotfix/2.3.61
2.3.61MSEARCH
|
2021-07-29 14:58:25 -04:00 |
|
|
William Wernert
|
e38219aa2e
|
Fix learn init.sls typo
|
2021-07-29 14:35:02 -04:00 |
|
|
William Wernert
|
9e92f6da3d
|
Add container to so-status when enabling/disabling ml module
|
2021-07-29 14:25:20 -04:00 |
|
|
William Wernert
|
44551ea9ee
|
Fix so-learn list
|
2021-07-29 13:31:48 -04:00 |
|
|
William Wernert
|
c53da9b1ff
|
Fix wrong variables in learn init.sls
|
2021-07-29 12:04:40 -04:00 |
|
|
William Wernert
|
e1785dbd9a
|
Fix typo
|
2021-07-29 12:00:53 -04:00 |
|
|
William Wernert
|
2560a9b78c
|
[wip] Change learn:modules to dictionary
|
2021-07-29 11:58:58 -04:00 |
|
|
William Wernert
|
d53e989c55
|
Add ability to set cpu_period per module
|
2021-07-29 11:52:10 -04:00 |
|
|
William Wernert
|
211a841cdb
|
Fix file path in bind mount for logscan
|
2021-07-29 11:40:19 -04:00 |
|
 Josh Patterson
|
50e4365475
|
Merge pull request #4990 from Security-Onion-Solutions/issue/4985
Issue/4985
|
2021-07-29 11:14:54 -04:00 |
|
 Jason Ertel
|
c524b54af1
|
Merge pull request #4988 from Security-Onion-Solutions/mkr2361
2.3.61-MSEARCH
|
2021-07-29 11:10:41 -04:00 |
|
 Mike Reeves
|
7591bb115e
|
2.3.61-MSEARCH
|
2021-07-29 11:09:54 -04:00 |
|
|
Mike Reeves
|
3d2da303c8
|
2.3.61-MSEARCH
|
2021-07-29 11:09:27 -04:00 |
|
|
Mike Reeves
|
f585eb6e62
|
2.3.61-MSEARCH
|
2021-07-29 11:08:03 -04:00 |
|
|
m0duspwnens
|
4b6120a46b
|
fix the hours get
|
2021-07-29 10:59:33 -04:00 |
|
|
Mike Reeves
|
d946c6d5ed
|
Merge pull request #4987 from Security-Onion-Solutions/kilo
Do not prompt about uppercased hostname during testing
|
2021-07-29 10:57:56 -04:00 |
|
|
William Wernert
|
5894b85bd1
|
Remove broken yaml dump arg, rename metavars
|
2021-07-29 10:57:53 -04:00 |
|
|
m0duspwnens
|
3fc43f7d92
|
allow for adjustment to auto patch os schedule - https://github.com/Security-Onion-Solutions/securityonion/issues/4985
|
2021-07-29 10:48:24 -04:00 |
|
|
Jason Ertel
|
8ed264460f
|
Do not prompt about uppercased hostname during testing
|
2021-07-29 10:45:35 -04:00 |
|
|
William Wernert
|
811b32735e
|
Merge branch 'dev' into foxtrot
|
2021-07-29 09:52:29 -04:00 |
|
|
Mike Reeves
|
4b3db0c4d2
|
Merge pull request #4972 from Security-Onion-Solutions/mkr2361
Fix Manager Search
|
2021-07-28 17:08:40 -04:00 |
|
|
Mike Reeves
|
281ba21298
|
Merge pull request #4956 from Security-Onion-Solutions/kilo
Merge master to dev
|
2021-07-28 17:07:58 -04:00 |
|
|
Mike Reeves
|
d4a177949a
|
Fix Manager Search
|
2021-07-28 17:05:16 -04:00 |
|
|
Mike Reeves
|
a42d8c9229
|
Fix Manager Search
|
2021-07-28 17:03:14 -04:00 |
|
|
William Wernert
|
dd0e407935
|
Use correct container name
|
2021-07-28 15:06:38 -04:00 |
|
|
William Wernert
|
7ef5b39b04
|
[wip] Fix 'Nonetype' object is not callable error
|
2021-07-28 14:28:00 -04:00 |
|
|
William Wernert
|
cf9121dfc2
|
Actually download so-learn container
|
2021-07-28 14:13:16 -04:00 |
|
|
Josh Patterson
|
fcfc2a65a9
|
Merge pull request #4968 from Security-Onion-Solutions/issue/3933
allow for sampleSize adjustment in kibana
|
2021-07-28 11:13:49 -04:00 |
|
|
William Wernert
|
91accb0bc6
|
[wip] Fixing so-learn script
|
2021-07-28 10:12:32 -04:00 |
|
|
William Wernert
|
e2abe8840f
|
Fix directory in logscan state
|
2021-07-28 10:12:19 -04:00 |
|
|
m0duspwnens
|
ead9ae8cb5
|
fix merge and defaults passed
|
2021-07-28 09:58:38 -04:00 |
|
|
William Wernert
|
455719936b
|
Uncomment required lines in so-learn
|
2021-07-28 09:53:35 -04:00 |
|
|
William Wernert
|
8d56fc71fa
|
Fix jinja length calculation
|
2021-07-28 09:53:24 -04:00 |
|
|
William Wernert
|
833d154bf4
|
Merge branch 'dev' into foxtrot
|
2021-07-28 09:50:11 -04:00 |
|
|
William Wernert
|
f31dc5abc7
|
Add learn to allowed states
|
2021-07-28 09:49:59 -04:00 |
|
|
m0duspwnens
|
9a429230fe
|
wrap with raw due to {{value}}
|
2021-07-28 09:39:35 -04:00 |
|
|
m0duspwnens
|
b36d46b7f2
|
change to jinja tem,plate
|
2021-07-28 09:27:44 -04:00 |
|
|
m0duspwnens
|
fee89665fd
|
dict not list for defaults
|
2021-07-28 09:18:15 -04:00 |
|