Commit Graph

11746 Commits

Author SHA1 Message Date
Josh Patterson
80043d154a Merge pull request #10004 from Security-Onion-Solutions/guifixes
Guifixes
2023-03-24 16:58:19 -04:00
m0duspwnens
aa66a6471a Merge remote-tracking branch 'origin/2.4/dev' into guifixes 2023-03-24 16:16:32 -04:00
m0duspwnens
1a6d887b5f idh setup changes 2023-03-24 16:16:22 -04:00
Mike Reeves
3fed3b3f3e Merge pull request #10003 from Security-Onion-Solutions/mirrorz
Add additional mirror
2023-03-24 15:13:03 -04:00
Mike Reeves
cb2fdae368 Switch Repos 2023-03-24 14:40:59 -04:00
Josh Brower
d9e1a54479 Merge pull request #10001 from Security-Onion-Solutions/2.4/playbookfix
Fix errors
2023-03-24 14:31:43 -04:00
Mike Reeves
afe4d75d91 Switch Repos 2023-03-24 14:13:48 -04:00
Doug Burks
7ced7488c7 Merge pull request #10000 from Security-Onion-Solutions/dougburks-patch-1
Add four new GeoIP dashboards
2023-03-24 14:11:58 -04:00
Doug Burks
5be5466efe fix GeoIP queries 2023-03-24 14:03:12 -04:00
Mike Reeves
b2c2e1574f Switch Repos 2023-03-24 14:02:13 -04:00
Doug Burks
a9dc7a14cb fix GeoIP queries 2023-03-24 13:56:51 -04:00
m0duspwnens
627b243cac Merge remote-tracking branch 'origin/2.4/dev' into guifixes 2023-03-24 13:52:38 -04:00
m0duspwnens
462b2b23b9 rework idh for web ui 2023-03-24 13:52:21 -04:00
Doug Burks
aa9d44ab09 Add four new GeoIP dashboards 2023-03-24 13:51:13 -04:00
Jason Ertel
890e1897af Merge pull request #9999 from Security-Onion-Solutions/kilo
prune system volumes during upgrade
2023-03-24 13:30:57 -04:00
Jason Ertel
0be57e686e prune system volumes during upgrade 2023-03-24 13:22:21 -04:00
Josh Brower
16bc63233f Fix errors 2023-03-24 09:33:12 -04:00
Mike Reeves
e38b0313c7 Merge pull request #9994 from Security-Onion-Solutions/hotones
Switch up elastic roles
2023-03-23 16:59:49 -04:00
Josh Brower
c6f6f306a7 Merge pull request #9993 from Security-Onion-Solutions/2.4/ingestsoclogs
SOC Logs & Hunt Query
2023-03-23 16:25:32 -04:00
Josh Brower
bad905f54c SOC Logs & Hunt Query 2023-03-23 16:22:59 -04:00
Mike Reeves
90159f4bcd Switch up elastic roles 2023-03-23 15:09:40 -04:00
weslambert
0f66645a89 Merge pull request #9990 from Security-Onion-Solutions/fix/elasticsearch_node_attrs_remove
Remove node attrs configuration since node roles will be used
2023-03-23 13:48:00 -04:00
weslambert
0a9a064648 Remove node attrs configuration since node roles will be used 2023-03-23 13:45:51 -04:00
weslambert
d6bc20a2b8 Merge pull request #9986 from Security-Onion-Solutions/fix/elastic_agent_template_changes
Elastic Agent template changes
2023-03-23 13:07:22 -04:00
Mike Reeves
886bcda38c Merge pull request #9988 from Security-Onion-Solutions/repofun
Add Repo Sync
2023-03-23 12:49:06 -04:00
Mike Reeves
3b671efa8e Fix cache location 2023-03-23 12:47:48 -04:00
Mike Reeves
0a096712cb Fix cache location 2023-03-23 12:39:31 -04:00
Mike Reeves
c977f38a58 Change repo conf permissions 2023-03-23 11:56:40 -04:00
Mike Reeves
8f4076ccd6 Change repo conf permissions 2023-03-23 11:46:32 -04:00
Mike Reeves
3756c93518 Change repo download script location 2023-03-23 11:05:48 -04:00
Mike Reeves
b68cf85392 Change repo download script location 2023-03-23 11:04:26 -04:00
Mike Reeves
e52087b742 Saltify it up 2023-03-23 10:54:01 -04:00
Mike Reeves
02aa8662f7 Saltify it up 2023-03-23 10:52:05 -04:00
Mike Reeves
f8d5acd37d Saltify it up 2023-03-23 10:43:47 -04:00
Mike Reeves
b3ea4194dd Only allow reposync to run on managers 2023-03-23 09:49:02 -04:00
Wes
84360aa9bf Set replicas for Osquery manager indices to 0 2023-03-22 21:47:49 +00:00
Josh Patterson
c64987e756 Merge pull request #9985 from Security-Onion-Solutions/m0duspwnens-patch-1
ensure highstate schedule added sooner in highstate
2023-03-22 17:24:23 -04:00
Josh Patterson
c8e93f0388 Update top.sls 2023-03-22 17:22:21 -04:00
Wes
3fba27a0d4 Ensure component template files are in the correct directory 2023-03-22 20:45:33 +00:00
Wes
28f5dcd43b Add managed generic Elastic Agent log component templates 2023-03-22 19:57:46 +00:00
Wes
eaaa028999 Update Elastic Agent template settings 2023-03-22 19:52:13 +00:00
Mike Reeves
f8e59478f4 Merge pull request #9984 from Security-Onion-Solutions/TOoSmOotH-patch-8
Update config.map.jinja
2023-03-22 15:49:35 -04:00
Mike Reeves
d2bc5e4af2 Update config.map.jinja 2023-03-22 15:45:51 -04:00
Josh Patterson
4f995c1c7e Merge pull request #9983 from Security-Onion-Solutions/2.4/zeekbpf
add sensor vars to eval
2023-03-22 12:23:07 -04:00
weslambert
bc2a84c631 Merge pull request #9982 from Security-Onion-Solutions/fix/elastic_integration_and_pipeline_strelka
Change data stream name and 'event.dataset' value for Strelka events
2023-03-22 11:08:58 -04:00
weslambert
6d87620c6a Explicitly set 'event.dataset' as 'file' 2023-03-22 11:04:18 -04:00
weslambert
68380d7ecb Change data_stream.dataset from 'file' to 'strelka' 2023-03-22 11:02:38 -04:00
m0duspwnens
5a2ef21ce4 add sensor vars to eval 2023-03-22 09:55:30 -04:00
m0duspwnens
fdaf8e8c68 idh changes for web ui 2023-03-22 09:38:40 -04:00
Mike Reeves
00b1ecb7d9 Merge pull request #9979 from Security-Onion-Solutions/esfun
Elastic Fixes
2023-03-22 08:51:24 -04:00