Commit Graph

11414 Commits

Author SHA1 Message Date
Jason Ertel abbc92a58d upgrade influx 2023-02-08 15:14:46 -05:00
Wes 713e9ee215 Create initial template for ILM policy load script 2023-02-08 20:10:41 +00:00
Jason Ertel 22eaeb1462 upgrade influx 2023-02-08 15:00:44 -05:00
Jason Ertel 2fddcc1e99 upgrade influx 2023-02-08 14:57:57 -05:00
Jason Ertel 67c8f6ba69 avoid cr/lr 2023-02-08 14:25:36 -05:00
Jason Ertel 44e60f1e57 upgrade influx 2023-02-08 14:03:27 -05:00
Jason Ertel 51674b3a5b upgrade influx 2023-02-08 13:50:32 -05:00
Jason Ertel 4c42671a21 Merge branch '2.4/dev' into kilo 2023-02-08 13:49:07 -05:00
Jason Ertel a1ac1785d3 upgrade influx 2023-02-08 13:40:27 -05:00
Josh Patterson 3b9bdecab8 Merge pull request #9745 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-02-08 13:26:40 -05:00
Jason Ertel ea0c3db8e1 upgrade influxdb 2023-02-08 13:23:45 -05:00
m0duspwnens 3d34a49e44 change to new local ports file 2023-02-08 13:21:48 -05:00
m0duspwnens 19f49dde75 recusivly copy the firewall files for setup 2023-02-08 13:14:08 -05:00
Josh Patterson d6fb0598df Merge pull request #9743 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-02-08 11:37:05 -05:00
m0duspwnens 31daeef30d 2.4 fw changes 2023-02-08 11:01:26 -05:00
m0duspwnens 342b9619b0 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-02-08 09:18:21 -05:00
m0duspwnens fb7ebcac7e 2.4 fw changes 2023-02-08 09:18:05 -05:00
Doug Burks 291bdc0d82 Merge pull request #9726 from Security-Onion-Solutions/2.4/change-radio-to-menu
FIX: Minimize keystrokes and errors in Setup by changing radio lists to menus where appropriate #9725
2023-02-06 12:11:21 -05:00
Doug Burks cd38ecb300 change whiptail selections from radiolist to menu where appropriate 2023-02-06 11:52:42 -05:00
Josh Patterson 22a18d8855 Merge pull request #9717 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-02-03 11:04:36 -05:00
m0duspwnens e8a1e164aa add so.version module 2023-02-03 10:58:08 -05:00
m0duspwnens e0e094cd95 rename sosbip and sosrange to sobip and sorange 2023-02-03 10:10:51 -05:00
m0duspwnens a37f0fd0c0 rename sosbridge to sobridge 2023-02-03 10:07:07 -05:00
m0duspwnens 6e45f1b6e1 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-02-03 09:55:50 -05:00
m0duspwnens df9ef9ffc7 add managersearch 2023-02-03 09:55:33 -05:00
weslambert bee5a1e9e8 Merge pull request #9711 from Security-Onion-Solutions/fix/so_import_pcap_suricata_metadata_disable_zeek
Only run Zeek if it is defined as the metadata engine
2023-02-02 13:27:35 -05:00
m0duspwnens 3e808a70fa allow managersearch. comment out localhost allow in setup 2023-02-02 12:11:03 -05:00
Wes bc082dff99 Only run Zeek if it is defined as 'mdengine' 2023-02-02 16:22:42 +00:00
m0duspwnens 33787d345b Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-02-02 10:04:01 -05:00
m0duspwnens 9eae31e488 add managersearch to allowed roles for so-firewall. fix setup error from so-firewall "Please specify a role with --role=" 2023-02-02 10:03:22 -05:00
weslambert 395cbf330a Merge pull request #9706 from Security-Onion-Solutions/fix/suricata_metadata
Add Suricata metadata configuration
2023-02-02 09:54:49 -05:00
Wes 5fba3c5872 Add Suricata metadata configuration 2023-02-02 14:48:01 +00:00
m0duspwnens 3ba64f7545 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-02-02 09:31:40 -05:00
weslambert eb7b6e78b9 Merge pull request #9702 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_disable
Disable loading of Kibana and Logstash integration policies
2023-02-01 16:02:56 -05:00
weslambert d242050627 Disable loading of Kibana and Logstash logs for now since there are issues with the packages from the registry 2023-02-01 15:59:35 -05:00
weslambert 3dfa7959b3 Merge pull request #9698 from Security-Onion-Solutions/fix/strelka_yara_exclusion_2_4
Add 'configured_vulns_ext_vars.yar' to exclusion list
2023-02-01 14:38:38 -05:00
weslambert 2101ca60e9 Add 'configured_vulns_ext_vars.yar' to exclusion list 2023-02-01 14:25:46 -05:00
m0duspwnens 33668105a5 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-02-01 11:32:02 -05:00
m0duspwnens d2dd68eb44 add global vars for managersearch 2023-02-01 11:31:36 -05:00
Josh Patterson 77749adc8f Merge pull request #9691 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-31 17:11:57 -05:00
m0duspwnens 6ec086e24a add influxdb as extra_hosts for grafana container 2023-01-31 17:10:11 -05:00
m0duspwnens 6f1438148f allow elastic agent access 2023-01-31 16:54:46 -05:00
m0duspwnens 12bede5e77 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-01-31 16:10:50 -05:00
weslambert 056bcd0121 Merge pull request #9683 from Security-Onion-Solutions/fix/kibana_osquery_live_query_link_remove
Remove OSQuery live query link
2023-01-31 13:38:07 -05:00
m0duspwnens 8cbafb52d8 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall 2023-01-31 13:32:51 -05:00
m0duspwnens 16e1e297a0 allow elasticsearch_rest 2023-01-31 13:32:33 -05:00
weslambert 98bea0322e Merge pull request #9688 from Security-Onion-Solutions/fix/elastic_agent_elasticsearch_output_typo_fix
Fix Elastic Agent Elasticsearch output typo
2023-01-31 12:57:38 -05:00
weslambert 74eed31eec Change Elasticsearch output name from 'so-manager_elasticsearch2' to 'so-manager_elasticsearch' 2023-01-31 12:55:03 -05:00
m0duspwnens aa411e2682 allow influxdb on manager and managersearch 2023-01-31 12:42:46 -05:00
weslambert cbf2bd1373 Remove OSQuery live query link 2023-01-31 10:59:17 -05:00