Commit Graph

201 Commits

Author SHA1 Message Date
Wes Lambert
41db668af6 update Wazuh data paths 2020-02-11 22:16:25 +00:00
Wes Lambert
0994f598c7 update Wazuh paths 2020-02-11 13:45:28 +00:00
Mike Reeves
521de8f154 Update 9997_output_helix.conf 2020-02-10 22:47:11 -05:00
Mike Reeves
6ceb127c46 Fix Wazuh paths for logstash/fb 2020-02-07 08:52:09 -05:00
Wes Lambert
ec11b9ea25 Remove Redis config from eval PL 2020-02-05 20:34:32 +00:00
m0duspwnens
799cf32265 fix logstash for so-helix role 2020-02-05 14:45:07 -05:00
Josh Brower
c1dd26d97e Logstash EVAL pipeline fix - osquery 2020-02-05 08:12:08 -05:00
m0duspwnens
6b580eaba9 evalmode fix 2020-01-30 17:54:24 -05:00
m0duspwnens
68e7dcfba0 evalfix 2020-01-30 17:38:48 -05:00
m0duspwnens
88967c2512 evalfix 2020-01-30 17:36:38 -05:00
m0duspwnens
d94065fa00 evalfix 2020-01-30 17:09:06 -05:00
Mike Reeves
1e0d0d74e1 Fix Eval Event Pickup x2 2020-01-30 16:16:21 -05:00
Mike Reeves
c32b2726fa Fix Eval Event Pickup 2020-01-30 16:10:59 -05:00
Mike Reeves
59d6b7cb8a Add log paths 2020-01-30 16:00:57 -05:00
m0duspwnens
bd5b597aed heavynode 2020-01-29 12:56:25 -05:00
m0duspwnens
306cc1127b heavynode 2020-01-29 12:56:25 -05:00
Wes Lambert
fbb9f099f9 Update Elastic state files 2020-01-28 14:49:58 +00:00
Mike Reeves
e038a8b731 Merge branch 'dev' into feature/issue124 2020-01-21 16:48:26 -05:00
m0duspwnens
a39edad3f6 changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124 2020-01-21 16:39:42 -05:00
William Wernert
54fb2ad244 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion-saltstack into feature/registry
# Conflicts:
#	salt/common/init.sls
#	salt/elasticsearch/init.sls
#	salt/filebeat/init.sls
#	salt/hive/init.sls
#	salt/kibana/init.sls
#	salt/logstash/init.sls
#	salt/suricata/init.sls
#	salt/tcpreplay/init.sls
#	salt/wazuh/init.sls
2020-01-14 15:48:56 -05:00
Mike Reeves
e141443238 Fix some contianer links 2020-01-14 11:05:36 -05:00
Mike Reeves
ae55b59048 Switch to using images in registry 2020-01-14 10:11:26 -05:00
Wes Lambert
7e1870e9d0 update image versions 2020-01-13 13:52:30 +00:00
m0duspwnens
ed28be4ba9 rename logstash config for storage to search - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/176 2019-12-20 11:32:55 -05:00
Mike Reeves
e49de63460 Helix - Final Parser Fixes 2019-12-13 13:59:29 -05:00
Mike Reeves
fdbb223155 Helix - Add geo 2019-12-13 11:52:43 -05:00
Mike Reeves
e263d72813 Setup - Add sensor pillar to Helix 2019-12-13 11:46:30 -05:00
Mike Reeves
79d48f9e77 Logstash - Fix helix output typeo 2019-12-12 15:17:19 -05:00
Mike Reeves
bd9b1957ba Logstash - Fix helix output 2019-12-12 14:12:51 -05:00
Mike Reeves
989641eb5a Setup - Fix prompts and disable onion user if iso 2019-12-11 13:44:40 -05:00
Mike Reeves
e134071295 Helix - Change Parsers for Helix 2019-12-10 13:50:27 -05:00
Mike Reeves
ae3c428941 Helix Logstash Changes 2019-12-10 10:02:41 -05:00
Mike Reeves
4c4cdb7189 Helix changes and Wazuh 2019-12-09 16:27:03 -05:00
Mike Reeves
3904c19333 Change Variables to UperCase 2019-12-09 10:04:14 -05:00
m0duspwnens
599341483e adding api key for Helix 2019-12-09 09:59:28 -05:00
Mike Reeves
362cd0487f Additional Helix Support 2019-12-09 09:52:52 -05:00
Mike Reeves
5140a17fe3 Merge pull request #140 from defensivedepth/logstash-fix
Fix dup events
2019-11-19 15:25:46 -05:00
Josh Brower
7373473b3f Fix dup events 2019-11-19 15:02:35 -05:00
Mike Reeves
f3c204c790 Disable Beats input - Update sensoroni version 2019-11-06 13:37:42 -05:00
Mike Reeves
9d9b3c18f3 Merge pull request #115 from defensivedepth/logstash-tweaks
Logstash tweaks
2019-10-28 10:38:51 -04:00
Josh Brower
4dbc5f07b2 Enable 0006_input_beats.conf by default on EVAL 2019-10-25 10:19:05 -04:00
Josh Brower
504dd6559d Default ssl to false 2019-10-24 16:44:33 -04:00
Mike Reeves
ca4cd782a1 Docker URL Fix - Issue #68 2019-10-16 10:39:18 -04:00
Dustin Lee
699371a4d7 logstash: add beats template used in latest SO 2019-10-11 08:36:44 -04:00
Mike Reeves
b1f582d218 Logstash Module - 1.1.1 2019-09-24 11:22:07 -04:00
doug
8472b24a67 parse Bro logs using Elasticsearch ingest node 2019-09-23 16:04:23 -04:00
Mike Reeves
6d14a94765 Logstash Module - Fix watch 2019-09-20 16:31:23 -04:00
Mike Reeves
50c074bb4e Logstash Module - Add more watches 2019-09-19 15:46:46 -04:00
Josh Brower
9a4eadc967 Add rule_signature mapping 2019-09-19 08:30:33 -04:00
Mike Reeves
b6fd6fa2cc PCAP module - fix dir 2019-06-19 22:10:09 -04:00