CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-05-06 19:38:51 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,036 Commits 51 Branches 125 Tags
7d07f3c8fe1f1d7317aa4ac4bb7d4d345ccd158d
Commit Graph

158 Commits

Author SHA1 Message Date
Josh Patterson ca588d2e78 new elastalert options advanced 2026-03-19 17:19:42 -04:00
Josh Patterson c92aedfff3 ensure bool sliders for elastalert config options 2026-03-19 13:06:32 -04:00
Josh Patterson c2c5aea244 ensure bool sliders for each state:enabled annotation 2026-03-19 12:35:38 -04:00
Josh Patterson 74ad2990a7 Merge remote-tracking branch 'origin/3/dev' into delta 2026-03-18 13:05:02 -04:00
Josh Patterson e19e83bebb allow user defined ulimits 2026-03-18 10:38:15 -04:00
Doug Burks 930985b770 update helpLink references for new documentation 2026-03-18 09:46:45 -04:00
Josh Patterson 2349750e13 DOCKER to DOCKERMERGED 2026-03-17 16:19:02 -04:00
Josh Patterson 00986dc2fd Merge remote-tracking branch 'origin/delta' into customulimit 2026-03-17 16:04:09 -04:00
Mike Reeves 2d97dfc8a1 Add customizable ulimit settings for all Docker containers 
Add ulimits as a configurable advanced setting for every container,
allowing customization through the web UI. Move hardcoded ulimits
from elasticsearch and zeek into defaults.yaml and fix elasticsearch
ulimits that were incorrectly nested under the environment key.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-17 15:10:42 -04:00
Josh Patterson 4dc377c99f DOCKER to DOCKERMERGED 2026-03-17 15:06:06 -04:00
Josh Patterson 7bf63b822d replace placeholder files with .gitkeep to keep empty directories 2026-03-17 11:40:49 -04:00
reyesj2 e3a4f0873e update expected version for elastalert state 2025-12-17 06:53:08 -06:00
Jason Ertel 217bb388a0 Clarify enabled settings 2024-09-16 10:05:17 -04:00
Jason Ertel cf47508185 notification updates 2024-08-22 09:02:32 -04:00
Jason Ertel 8af3158ea7 fix elastalert settings 2024-05-21 18:28:21 -04:00
Jason Ertel d57cc9627f exclude false positives related to detections 2024-05-21 13:31:50 -04:00
Jason Ertel d315b95d77 elastalert settings 2024-05-21 07:15:19 -04:00
Jason Ertel b7a4f20c61 elastalert settings 2024-05-20 20:11:30 -04:00
Jason Ertel 02b4d37c11 elastalert settings 2024-05-20 20:00:31 -04:00
Jason Ertel f8ce039065 elastalert settings 2024-05-20 19:58:12 -04:00
Jason Ertel e2d0b8f4c7 elastalert settings 2024-05-20 19:38:36 -04:00
Jason Ertel 8a3061fe3e elastalert settings 2024-05-20 19:36:06 -04:00
Jason Ertel c594168b65 elastalert settings 2024-05-20 19:05:43 -04:00
Jason Ertel 6b2219b7f2 elastalert settings 2024-05-20 18:52:37 -04:00
Jason Ertel 1c4d36760a add support for custom alerters 2024-05-17 14:49:39 -04:00
weslambert 26b5a39912 Change index to detections.alerts 2024-05-13 12:59:17 -04:00
DefensiveDepth f2c3c928fc Sigma pivot fix and cleanup 2024-04-29 08:49:05 -04:00
Josh Brower 5a72c558cb Tag at top level 2023-07-11 08:35:47 -04:00
Josh Brower a6e907f76c Tag Playbook Alerts 2023-07-11 08:03:15 -04:00
weslambert 96b60fa39a Restore original URL syntax, but use data stream 2023-06-06 20:53:05 -04:00
weslambert f172a74fbc Remove EQL setting 2023-06-06 20:51:29 -04:00
weslambert c4be56ec7b Update host syntax 2023-06-06 20:51:03 -04:00
Wes 905bc564fc Change data stream name 2023-06-05 21:18:47 +00:00
Wes f6f387428f Update Playbook alerter to write to a data stream 2023-06-05 21:17:10 +00:00
Mike Reeves cace817c79 Merge branch '2.4/dev' of https://github.com/Security-Onion-Solutions/securityonion into airgaps 2023-05-24 08:43:03 -04:00
weslambert 00bd93c026 Update 'url' to use 'es_hosts' 2023-05-19 17:14:13 -04:00
weslambert 1ddf45bbbe Change Elastalert writeback index name from 'elastalert_status' to 'elastalert' 2023-05-19 12:39:27 -04:00
Mike Reeves 5315c51197 Allow additional docker parameters 2023-05-18 16:52:38 -04:00
Mike Reeves c0dc05f26a Allow additional docker parameters 2023-05-18 16:39:42 -04:00
Mike Reeves 0fd9fb9294 Allow additional docker parameters 2023-05-18 15:19:09 -04:00
Wes d3c7ea4805 Add EQL option 2023-05-18 16:55:26 +00:00
Wes 82c3d78672 Change Elasticsearch host syntax 2023-05-18 16:52:27 +00:00
m0duspwnens 9049f9cf03 enabled/disable elastalert via web ui 2023-05-08 15:56:26 -04:00
Mike Reeves 7595072e85 Fix some files 2023-05-02 12:15:05 -04:00
Mike Reeves 2d4f4791e0 Move files out of common 2023-05-01 15:21:31 -04:00
Mike Reeves 3d7f2bc691 Fix annotations and file locations 2023-04-27 13:23:53 -04:00
Mike Reeves 148b0b1c4c use hostnames please 2023-02-23 11:11:29 -05:00
Mike Reeves 95f254dc63 Change elastalert ip 2023-02-23 09:37:20 -05:00
Mike Reeves dc2fed5b04 Change elastalert ip 2023-02-23 09:34:16 -05:00
Mike Reeves 0ec0983d7b Chane Elastalert to use hosntame 2023-02-23 08:57:30 -05:00