75 Commits

Author	SHA1	Message	Date
Mike Reeves	674bb342ea	Turn off SSL Verification in Telegraf	2021-03-15 16:39:43 -04:00
Mike Reeves	bfd05a8cfc	Change to https for elastic connections	2021-03-02 11:32:29 -05:00
m0duspwnens	3983e08fe5	exclude zeekcaptureloss when suricata metadata selected https://github.com/Security-Onion-Solutions/securityonion/issues/3206	2021-03-01 13:31:05 -05:00
m0duspwnens	141fbaced1	add eps graph to standalone	2021-02-23 09:40:21 -05:00
Mike Reeves	4ef38f8d04	Add EPS and RAID status collection for telegraf	2021-01-25 19:14:46 -05:00
William Wernert	4079f8a8e8	[fix] Telegraf doesn't clean up zombie processes, use init flag to fix this	2021-01-22 12:23:09 -05:00
William Wernert	f1781b1fde	[fix] Set timeout for scripts (15s, 3x default 5s)	2021-01-22 12:15:29 -05:00
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
m0duspwnens	225ed1c14a	change suriloss and zeekloss to be more similar code style	2021-01-12 16:39:19 -05:00
m0duspwnens	6ea1a83afe	resolve some issues with the zeekloss script https://github.com/Security-Onion-Solutions/securityonion/issues/2590	2021-01-11 14:10:08 -05:00
m0duspwnens	90dcad7e6f	make sure timestamp on steno log line has changed so we dont snapshot the drop%	2020-12-18 11:00:24 -05:00
m0duspwnens	412e8eeccb	tell dc to use 4 decimal spot for suriloss calc	2020-12-17 18:05:25 -05:00
Mike Reeves	09b5e6d227	Fix SSL issue	2020-12-16 11:57:27 -05:00
Mike Reeves	978ba5b3ad	Update zeekloss.sh	2020-11-11 13:09:52 -05:00
Mike Reeves	a4df3623be	Update zeekcaptureloss.sh	2020-11-11 13:09:31 -05:00
Mike Reeves	4a80c37167	Update suriloss.sh	2020-11-11 13:09:08 -05:00
Mike Reeves	8e88c350d5	Update stenoloss.sh	2020-11-11 13:08:43 -05:00
Mike Reeves	a6a9f03cb0	Update redis.sh	2020-11-11 13:08:28 -05:00
Mike Reeves	c9bfd8a253	Update oldpcap.sh	2020-11-11 12:55:28 -05:00
Mike Reeves	ee0e1ce8d7	Update influxdbsize.sh	2020-11-11 12:55:08 -05:00
Mike Reeves	814aa85dba	Update helixeps.sh	2020-11-11 12:54:48 -05:00
Mike Reeves	c5ddddda2a	Update checkfiles.sh	2020-11-11 12:54:31 -05:00
Mike Reeves	73c17b77ae	Update zeekcaptureloss.sh	2020-11-11 11:43:48 -05:00
Mike Reeves	edb0d71e87	Update zeekloss.sh	2020-11-11 11:43:28 -05:00
Mike Reeves	6ff1922788	Update zeekcaptureloss.sh	2020-11-11 11:42:58 -05:00
Mike Reeves	9548b3df54	Update stenoloss.sh	2020-11-11 11:23:20 -05:00
Mike Reeves	d3f65ac1a8	Update redis.sh	2020-11-11 11:22:52 -05:00
Mike Reeves	cb46c13054	Update oldpcap.sh	2020-11-11 11:22:28 -05:00
Mike Reeves	a4d3e109e6	Update influxdbsize.sh	2020-11-11 11:17:18 -05:00
Mike Reeves	711f5ab38f	Update helixeps.sh	2020-11-11 11:16:47 -05:00
Mike Reeves	ea1227de9d	Update checkfiles.sh	2020-11-11 11:16:15 -05:00
Mike Reeves	f9b52677d7	Update suriloss.sh	2020-11-11 11:15:45 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
William Wernert	6169758f4e	[fix] 0 -> root so file owner is set correctly	2020-11-03 16:47:59 -05:00
Doug Burks	190869a1f2	enable https on elasticsearch nodes that support it	2020-10-13 16:04:55 -04:00
m0duspwnens	ea1324e498	fix LOSS calc line	2020-10-09 11:54:39 -04:00
m0duspwnens	f5cacd66b8	correct zeekcaptureloss script to work on zeek standalone	2020-10-09 11:39:44 -04:00
m0duspwnens	8540a691dc	only send loss if timestamp on data has changed	2020-10-07 11:23:06 -04:00
m0duspwnens	1106b2bf96	only send loss if timestamp on data has changed	2020-10-07 11:15:10 -04:00
m0duspwnens	d09f0f841e	only send loss if timestamp on data has changed	2020-10-07 11:13:03 -04:00
m0duspwnens	6f2d47cc40	only send loss if timestamp on data has changed	2020-10-07 11:11:06 -04:00
m0duspwnens	2317e8b348	only send loss if timestamp on data has changed	2020-10-07 11:08:41 -04:00
m0duspwnens	f96d6ae4f4	only send loss if timestamp on data has changed	2020-10-07 11:06:54 -04:00
m0duspwnens	5e534571ff	set timestamp with capture loss	2020-10-07 10:20:51 -04:00
m0duspwnens	14dd80b410	handle whitespace	2020-10-06 18:46:32 -04:00
m0duspwnens	af2df2c7d1	just print the loss	2020-10-06 18:44:22 -04:00
m0duspwnens	f95712c502	update log file	2020-10-06 18:38:51 -04:00
m0duspwnens	48ca2cdff1	fix pillars we check	2020-10-06 18:10:41 -04:00
m0duspwnens	73ce948d42	add zeekcaptureloss to data to influxdb. rename broloss to zeekloss - https://github.com/Security-Onion-Solutions/securityonion/issues/1403	2020-10-06 18:05:41 -04:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00