Commit Graph

79 Commits

Author SHA1 Message Date
Wes Lambert cdfc3a15ad osquery: fix host field conflict 2019-01-16 19:25:06 +00:00
Josh Brower ce43fd7cd4 Moved to dynamic 2019-01-01 11:20:09 -05:00
Josh Brower b9f6269925 Moved to dynamic 2019-01-01 11:20:01 -05:00
Josh Brower 15bfce07e8 Move osquery parsers from custom to dynamic 2019-01-01 11:13:05 -05:00
Josh Brower f21e52b431 Add missing character 2019-01-01 11:11:29 -05:00
Josh Brower fff13d5861 Tag & initial JSON decode for osquery logs 2018-12-28 13:56:06 -05:00
Josh Brower 1917b469ec osquery-tagged logs output to ES 2018-12-28 13:55:02 -05:00
Josh Brower 389b57f226 parser for windows event logs shipped by osquery 2018-12-28 13:54:11 -05:00
Wes Lambert 172c9e0593 Logstash - Wazuh parsing updates 2018-12-14 18:00:19 +00:00
Wes Lambert 41e9c4c7e0 Logstash - Alter input for Wazuh logs 2018-12-12 20:52:18 +00:00
dlee35 7fc1f576d9 changed tag eval to type 2018-12-05 15:05:11 -05:00
Wes Lambert 05accf3017 Logstash - Output config update for IDS type 2018-11-30 13:17:53 +00:00
Mike Reeves 4203898427 Logstash Module - Rework it 2018-11-28 20:44:56 -05:00
Mike Reeves 119c94ea17 Logstash Module - Fix so logstash workers gets picked up 2018-11-27 13:42:40 -05:00
Mike Reeves b88a9b5769 Logstash Module - Wes Mods 2018-11-13 14:41:07 -05:00
Wes Lambert a531dd6e52 update template for eve.json output 2018-11-03 15:11:49 +00:00
Mike Reeves f2bfef58c8 Logstash Module - Fix ES output logic 2018-11-01 18:03:05 -04:00
Mike Reeves 2bf1591208 Logstash Module - Fix Output 2018-10-31 14:22:58 -04:00
Mike Reeves 0161a41941 Redis and Filebeat fixes to point to IP 2018-10-18 21:18:15 -04:00
Mike Reeves 41e3b04b25 Logstash Module - Sensors now show up correclty 2018-10-16 21:00:04 -04:00
Mike Reeves a5979fcb88 Logstash Module - Change it to arrays 2018-10-16 17:47:10 -04:00
Mike Reeves ea7ddfc2da Logstash Module - Change it to arrays 2018-10-16 17:41:04 -04:00
Mike Reeves 335ac02720 Logstash Module - Change it to arrays 2018-10-16 17:25:21 -04:00
Mike Reeves 2f517a6c8d Logstash Module - Change it to arrays 2018-10-16 16:46:04 -04:00
Mike Reeves 57039d83c8 Logstash Module - Change some fields so dashboards load 2018-10-16 16:21:50 -04:00
Mike Reeves b0293c24b5 Logstash Module - Disable freq and modify some configs 2018-10-16 14:53:48 -04:00
Mike Reeves cd823a26f3 Logstash Module - Change some parsing order 2018-10-15 19:24:01 -04:00
Mike Reeves 95edae40ea Utility Module - Rework cluster settings 2018-10-11 22:56:33 -04:00
Mike Reeves 9ee87a92e9 Getting Close 2018-10-11 19:38:25 -04:00
Mike Reeves 1996787b6e Filebeat Module - Change key to normal key 2018-10-09 13:05:11 -04:00
Mike Reeves 0be926715d PKCS8 Fix Attempt #1 2018-10-09 10:32:08 -04:00
Mike Reeves 2a7c61cbf6 Logstash Module - Fix the templates 2018-10-05 18:21:28 -04:00
Mike Reeves 9d62bbeed2 Logstash Module - Add missing quotes 2018-10-05 13:09:02 -04:00
Mike Reeves 9a79a89155 Logstash Module - Fix beats and ossec outputs 2018-10-05 12:51:39 -04:00
Mike Reeves 1f2f7d567d Logstash Module - Fix beats and ossec outputs 2018-10-05 12:49:02 -04:00
Mike Reeves 55b2f2211f Logstash Module - Update logstash output scripts 2018-10-04 14:23:30 -04:00
Mike Reeves 44a0d2909d Logstash Module - Change redis IP in output 2018-10-02 10:12:20 -04:00
Mike Reeves 83e1b37749 Logstash Module - Fix Redis Output hostname 2018-09-28 10:46:14 -04:00
Mike Reeves 90c95c7b4c Logstash Module - Fix Redis Output hostname 2018-09-28 08:54:35 -04:00
Mike Reeves 27579a6150 Logstash Module - Pull from unparsed 2018-09-21 08:30:40 -04:00
Mike Reeves c9b7786baf Logstash Module - Fix jinja syntax 2018-09-19 15:35:29 -04:00
Mike Reeves 683662bdee Logstash Module - Fix jinja syntax 2018-09-19 15:12:32 -04:00
Mike Reeves c43e5b8420 Logstash Module - Fix jinja syntax 2018-09-19 13:55:28 -04:00
Mike Reeves f39c522445 Logstash Module - syntax error in output for windows 2018-09-18 21:16:15 -04:00
Mike Reeves 524c26ab72 Logstash Module - Commas son commas 2018-09-18 20:55:07 -04:00
Mike Reeves 131c72cc40 Logstash Module - Clean up logic around master 2018-09-18 17:43:03 -04:00
Mike Reeves a413b7594d Logstash Module - Add Jinja for output plugins 2018-09-14 14:32:27 -04:00
Mike Reeves 9f89826590 SO Setup - Fix for CentOS in saltify function 2018-09-10 10:59:43 -04:00
Mike Reeves f7afc909ff Change Suricata Paths and Added Logstash Files 2018-08-28 09:30:59 -04:00
Mike Reeves 9696c77bd3 Fix several sytax errors 2018-08-08 10:02:43 -04:00