Commit Graph

11186 Commits

Author SHA1 Message Date
Jason Ertel 9541214073 logCmd with tee is eating the exit code 2023-01-20 12:26:52 -05:00
Jason Ertel 56478da0b2 eliminate find/exec issue altogether to keep it simple 2023-01-20 11:58:29 -05:00
Jason Ertel c3384d8381 further improvements 2023-01-20 11:23:13 -05:00
Jason Ertel 1e4f9c9f26 use newer find syntax to allow the exec to work inside a quoted string 2023-01-20 11:01:02 -05:00
Jason Ertel fea4a1b33d Merge branch '2.4/dev' into kilo 2023-01-20 10:33:17 -05:00
Jason Ertel ece63b72e2 Ensure so-verify output is logged 2023-01-20 07:38:58 -05:00
Jason Ertel 46aa7ebdf3 correct find/exec syntax 2023-01-20 06:48:33 -05:00
weslambert 9c83b775ee Merge pull request #9604 from Security-Onion-Solutions/feature/sensoroni_scripts
Add scripts for starting, stopping, and restarting Sensoroni
2023-01-19 16:59:29 -05:00
Wes 739c174898 Add scripts for starting, stopping, and restarting Sensoroni 2023-01-19 21:50:10 +00:00
Jason Ertel 4044706cd9 Merge pull request #9603 from Security-Onion-Solutions/kilo
Handle setup failures
2023-01-19 15:49:41 -05:00
Jason Ertel 79fb5dc525 prevent false success occurring when deleting the grafana dashboard 2023-01-19 14:19:55 -05:00
Jason Ertel 59177288ef correct grep patterns 2023-01-19 13:56:14 -05:00
Jason Ertel 85b5d1b317 Merge branch '2.4/dev' into kilo 2023-01-19 12:53:36 -05:00
Jason Ertel 6b7a8e1fcd fix verify path 2023-01-19 12:53:24 -05:00
Josh Brower 027c83b5ea Merge pull request #9601 from Security-Onion-Solutions/disablecontainer
Fixup
2023-01-19 11:47:04 -05:00
Josh Brower 4369d2385b Temp disable Elastic Registry Repo 2023-01-19 11:45:13 -05:00
Jason Ertel c5260e4787 verify setup 2023-01-19 11:25:59 -05:00
Jason Ertel 35835edf96 Merge branch '2.4/dev' into kilo 2023-01-19 11:04:32 -05:00
weslambert 8c4e00cfbd Merge pull request #9600 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_remove
Remove default "logs-*" template settings for now
2023-01-19 10:30:44 -05:00
weslambert 7d3f6121eb Remove default "logs-*" template settings for now 2023-01-19 10:29:10 -05:00
Jason Ertel 05c7999df3 merge 2023-01-19 10:06:58 -05:00
Jason Ertel 05a6d702b0 Add logic to determine if setup succeeded and provide relevant output 2023-01-19 10:03:03 -05:00
Josh Brower 8ce96942c1 Merge pull request #9599 from Security-Onion-Solutions/disablecontainer
Temp disable Elastic Registry Repo
2023-01-19 07:27:51 -05:00
Josh Brower e83e54936e Temp disable Elastic Registry Repo 2023-01-19 07:25:25 -05:00
weslambert 90f3e33cc6 Merge pull request #9597 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_priority_modification
Modify default 'logs-*' Elasticsearch template priority
2023-01-18 17:30:52 -05:00
weslambert 7a499c9051 Modify default 'logs-*' template priority 2023-01-18 17:24:07 -05:00
m0duspwnens 1eafb8d62a reload salt modules when docker is installed 2023-01-18 13:46:06 -05:00
m0duspwnens d501b0fac9 add elastic agent to assigned hostgroups 2023-01-18 09:46:55 -05:00
weslambert 1bf088e976 Merge pull request #9591 from Security-Onion-Solutions/fix/kibana_basepath_rewrite_disable
Disable Kibana's native base path rewrite and add publicBaseUrl
2023-01-17 16:59:06 -05:00
weslambert 1fed3cf474 Disable Kibana's native base path rewrite and add publicBaseUrl 2023-01-17 16:54:31 -05:00
Josh Patterson e0f8315d27 Merge pull request #9590 from Security-Onion-Solutions/2.4/firewall
create /opt/so/ for non manager nodes during setup
2023-01-17 15:36:34 -05:00
m0duspwnens dbfe176b45 create /opt/so/ for non manager nodes during setup 2023-01-17 14:15:44 -05:00
Josh Patterson 2842178396 Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall
fix iptables
2023-01-17 13:50:16 -05:00
m0duspwnens aa858bab45 fix iptables 2023-01-17 13:48:39 -05:00
weslambert 1723f58c04 Merge pull request #9579 from Security-Onion-Solutions/fix/elasticsearch_templates_so-ids
Remove so-ids since the data stream is now 'logs-suricata-*'
2023-01-13 16:17:38 -05:00
weslambert ca80548bf0 Remove so-ids since the data stream is now 'logs-suricata-*' 2023-01-13 16:15:58 -05:00
weslambert 3e5127810d Merge pull request #9577 from Security-Onion-Solutions/fix/elasticsearch_elastic_agent_templates
Make sure Elastic Agent data streams do not use replicas
2023-01-13 16:12:09 -05:00
weslambert 73a4dae28e Make sure Elastic Agent data streams do not use replicas 2023-01-13 16:10:44 -05:00
Josh Patterson 3efca0010a Merge pull request #9573 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-13 12:41:58 -05:00
m0duspwnens 3653df4d5f spell it right 2023-01-13 10:18:13 -05:00
m0duspwnens 6033e9a0de use port_bindings from docker defaults in docker states 2023-01-13 10:15:10 -05:00
weslambert 7cba5626b7 Merge pull request #9570 from Security-Onion-Solutions/fix/elasticsearch_templates_elastic_agent
Change priority for Elastic Agent Elasticsearch index templates
2023-01-12 16:48:12 -05:00
m0duspwnens a69b0951d3 add strelka containers 2023-01-12 16:47:34 -05:00
weslambert 654d869e3e Change priority from 500 to 200 for Elastic Agent index templates to avoid collisions with other templates 2023-01-12 16:46:08 -05:00
m0duspwnens d163d834d4 allow for binding ip and ports to different port number 2023-01-12 16:42:45 -05:00
weslambert be6b42494c Merge pull request #9569 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_kratos
Kratos Index Changes
2023-01-12 15:33:51 -05:00
weslambert fb8d8ea972 Update Elasticsearch index template for Kratos 2023-01-12 15:31:41 -05:00
weslambert 9416552338 Don't set the Kratos index explicitly 2023-01-12 15:25:35 -05:00
Mike Reeves 6c8b17d4d1 Merge pull request #9567 from Security-Onion-Solutions/mkr24
Fix nsm
2023-01-12 10:43:42 -05:00
Mike Reeves 8c5a060a80 Fix nsm 2023-01-12 10:41:54 -05:00