Commit Graph

11943 Commits

Author SHA1 Message Date
m0duspwnens
462b2b23b9 rework idh for web ui 2023-03-24 13:52:21 -04:00
Doug Burks
aa9d44ab09 Add four new GeoIP dashboards 2023-03-24 13:51:13 -04:00
Jason Ertel
890e1897af Merge pull request #9999 from Security-Onion-Solutions/kilo
prune system volumes during upgrade
2023-03-24 13:30:57 -04:00
Jason Ertel
0be57e686e prune system volumes during upgrade 2023-03-24 13:22:21 -04:00
Josh Brower
16bc63233f Fix errors 2023-03-24 09:33:12 -04:00
Mike Reeves
e38b0313c7 Merge pull request #9994 from Security-Onion-Solutions/hotones
Switch up elastic roles
2023-03-23 16:59:49 -04:00
Josh Brower
c6f6f306a7 Merge pull request #9993 from Security-Onion-Solutions/2.4/ingestsoclogs
SOC Logs & Hunt Query
2023-03-23 16:25:32 -04:00
Josh Brower
bad905f54c SOC Logs & Hunt Query 2023-03-23 16:22:59 -04:00
Mike Reeves
90159f4bcd Switch up elastic roles 2023-03-23 15:09:40 -04:00
weslambert
0f66645a89 Merge pull request #9990 from Security-Onion-Solutions/fix/elasticsearch_node_attrs_remove
Remove node attrs configuration since node roles will be used
2023-03-23 13:48:00 -04:00
weslambert
0a9a064648 Remove node attrs configuration since node roles will be used 2023-03-23 13:45:51 -04:00
weslambert
d6bc20a2b8 Merge pull request #9986 from Security-Onion-Solutions/fix/elastic_agent_template_changes
Elastic Agent template changes
2023-03-23 13:07:22 -04:00
Mike Reeves
886bcda38c Merge pull request #9988 from Security-Onion-Solutions/repofun
Add Repo Sync
2023-03-23 12:49:06 -04:00
Mike Reeves
3b671efa8e Fix cache location 2023-03-23 12:47:48 -04:00
Mike Reeves
0a096712cb Fix cache location 2023-03-23 12:39:31 -04:00
Mike Reeves
c977f38a58 Change repo conf permissions 2023-03-23 11:56:40 -04:00
Mike Reeves
8f4076ccd6 Change repo conf permissions 2023-03-23 11:46:32 -04:00
Mike Reeves
3756c93518 Change repo download script location 2023-03-23 11:05:48 -04:00
Mike Reeves
b68cf85392 Change repo download script location 2023-03-23 11:04:26 -04:00
Mike Reeves
e52087b742 Saltify it up 2023-03-23 10:54:01 -04:00
Mike Reeves
02aa8662f7 Saltify it up 2023-03-23 10:52:05 -04:00
Mike Reeves
f8d5acd37d Saltify it up 2023-03-23 10:43:47 -04:00
Mike Reeves
b3ea4194dd Only allow reposync to run on managers 2023-03-23 09:49:02 -04:00
Wes
84360aa9bf Set replicas for Osquery manager indices to 0 2023-03-22 21:47:49 +00:00
Josh Patterson
c64987e756 Merge pull request #9985 from Security-Onion-Solutions/m0duspwnens-patch-1
ensure highstate schedule added sooner in highstate
2023-03-22 17:24:23 -04:00
Josh Patterson
c8e93f0388 Update top.sls 2023-03-22 17:22:21 -04:00
Wes
3fba27a0d4 Ensure component template files are in the correct directory 2023-03-22 20:45:33 +00:00
Wes
28f5dcd43b Add managed generic Elastic Agent log component templates 2023-03-22 19:57:46 +00:00
Wes
eaaa028999 Update Elastic Agent template settings 2023-03-22 19:52:13 +00:00
Mike Reeves
f8e59478f4 Merge pull request #9984 from Security-Onion-Solutions/TOoSmOotH-patch-8
Update config.map.jinja
2023-03-22 15:49:35 -04:00
Mike Reeves
d2bc5e4af2 Update config.map.jinja 2023-03-22 15:45:51 -04:00
Josh Patterson
4f995c1c7e Merge pull request #9983 from Security-Onion-Solutions/2.4/zeekbpf
add sensor vars to eval
2023-03-22 12:23:07 -04:00
weslambert
bc2a84c631 Merge pull request #9982 from Security-Onion-Solutions/fix/elastic_integration_and_pipeline_strelka
Change data stream name and 'event.dataset' value for Strelka events
2023-03-22 11:08:58 -04:00
weslambert
6d87620c6a Explicitly set 'event.dataset' as 'file' 2023-03-22 11:04:18 -04:00
weslambert
68380d7ecb Change data_stream.dataset from 'file' to 'strelka' 2023-03-22 11:02:38 -04:00
m0duspwnens
5a2ef21ce4 add sensor vars to eval 2023-03-22 09:55:30 -04:00
m0duspwnens
fdaf8e8c68 idh changes for web ui 2023-03-22 09:38:40 -04:00
Mike Reeves
00b1ecb7d9 Merge pull request #9979 from Security-Onion-Solutions/esfun
Elastic Fixes
2023-03-22 08:51:24 -04:00
Mike Reeves
007e2baf41 Change Elastic Logic 2023-03-21 17:46:52 -04:00
Mike Reeves
5fc297b8c1 Change Elastic Logic 2023-03-21 16:52:08 -04:00
Mike Reeves
07f303205a Merge pull request #9977 from Security-Onion-Solutions/TOoSmOotH-patch-7
Update so-minion
2023-03-21 15:50:52 -04:00
Mike Reeves
aeb6d47637 Update so-minion 2023-03-21 13:39:24 -04:00
Josh Brower
a247d1cc50 Merge pull request #9978 from Security-Onion-Solutions/2.4/updateEA
2.4/update ea
2023-03-21 13:27:59 -04:00
Mike Reeves
30fc74ac09 Update so-minion 2023-03-21 12:53:35 -04:00
Josh Brower
cd6bf0fe78 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/updateEA 2023-03-21 12:48:30 -04:00
Josh Brower
d87060b56e Update Elastic Agent to 8.6.2 2023-03-21 12:48:02 -04:00
Mike Reeves
1526a7de11 Rework IDH phase 1 2023-03-21 11:26:30 -04:00
Mike Reeves
d89310e479 Rework IDH phase 1 2023-03-21 11:25:06 -04:00
Mike Reeves
bd17121834 Rework IDH phase 1 2023-03-21 11:23:31 -04:00
Jason Ertel
ca363053e6 Merge pull request #9975 from Security-Onion-Solutions/kilo
catch errors and exit with proper exit code
2023-03-21 10:51:36 -04:00