11536 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
weslambert	8ade7b85fc	Fix system syslog default key value	2023-03-13 17:24:40 -04:00
weslambert	c2701f1835	Fix system syslog default key value	2023-03-13 17:24:12 -04:00
weslambert	d5bb223235	Fix system syslog delete file configuration	2023-03-13 17:10:52 -04:00
weslambert	bb711a2a15	Merge pull request #9923 from Security-Onion-Solutions/fix/curator_default_elastic_agent_logs ... Add Elastic Agent default indices to be managed by Curator	2023-03-13 16:59:40 -04:00
Wes	efc5832499	Add Elastic Agent default log action files	2023-03-13 20:54:38 +00:00
Wes	8d395dc465	Add Elastic Agent default data stream backing indices for management by Curator	2023-03-13 20:54:13 +00:00
Josh Brower	126add7ddd	Merge pull request #9922 from Security-Onion-Solutions/2.4/fieldfixes ... auto-apply firewall rules	2023-03-13 12:00:28 -04:00
Josh Brower	b3a2680847	auto-apply firewall rules	2023-03-13 11:41:36 -04:00
weslambert	1774d16d9a	Merge pull request #9921 from Security-Onion-Solutions/fix/elasticsearch_template_data_stream_configuration ... Move data stream configuration outside of ILM policy definition	2023-03-13 09:29:42 -04:00
Wes	e105e56fac	Move data stream configuration outside of ILM policy definition	2023-03-13 13:27:02 +00:00
weslambert	a844819261	Merge pull request #9919 from Security-Onion-Solutions/fix/elasticsearch_ilm_policy_elastic_agent_default ... Add index lifecycle management policy definitions for default Elastic Agent data streams	2023-03-10 17:02:27 -05:00
weslambert	16d9478196	Add index lifecycle management policy definitions for default Elastic Agent data streams	2023-03-10 16:54:47 -05:00
Josh Brower	2fe8668f1b	Merge pull request #9891 from Security-Onion-Solutions/2.4/huntqueries ... Initial updates for 2.4 fieldnames	2023-03-09 14:37:50 -05:00
Josh Brower	73abf8dbfd	Generic host dashboard	2023-03-09 14:32:52 -05:00
Josh Brower	1493806040	Change host dashboard titles	2023-03-08 17:03:02 -05:00
Josh Brower	a5c89bfaa1	update sysmon dashboards	2023-03-08 16:49:34 -05:00
Josh Patterson	d75866caec	Merge pull request #9912 from Security-Onion-Solutions/2.4/heavynode ... 2.4/heavynode	2023-03-08 14:11:43 -05:00
m0duspwnens	61879a8d33	merge with dev and resolve conflicts in salt/top	2023-03-08 09:04:09 -05:00
weslambert	7ad34ee8d7	Merge pull request #9910 from Security-Onion-Solutions/fix/curator_so_curator_cluster_warm ... Remove reference to 'so-curator-cluster-warm' script since it has been removed	2023-03-07 16:18:05 -05:00
weslambert	2d7ce41a70	Remove reference to 'so-curator-cluster-warm' script since it has been removed	2023-03-07 16:16:55 -05:00
weslambert	a738c7c36d	Merge pull request #9907 from Security-Onion-Solutions/fix/curator_global_delete_action ... Add the new Security Onion index format to the global delete action file for Curator	2023-03-07 16:03:28 -05:00
Josh Brower	6f82cf3807	Merge pull request #9906 from Security-Onion-Solutions/2.4/setupfix ... Remove EA install from manager highstates	2023-03-07 15:33:34 -05:00
weslambert	e93c052d34	Add the new index format to the global delete action file for Curator	2023-03-07 15:21:53 -05:00
Josh Brower	fd2312a2ac	Remove EA install from manager highstates	2023-03-07 15:13:35 -05:00
weslambert	8c79d7e40d	Merge pull request #9905 from Security-Onion-Solutions/fix/curator_new_action_files ... Add New Curator Action Files	2023-03-07 12:44:25 -05:00
Wes	f50639d2d2	Fix import and syslog actions	2023-03-07 17:41:48 +00:00
Wes	26c9813276	Add keys for new Curator actions to defaults.yaml	2023-03-07 17:29:07 +00:00
Wes	88d98af243	Add new Curator action files to Curator close and delete scripts	2023-03-07 17:21:03 +00:00
Wes	d636546871	Add new Curator action files	2023-03-07 17:15:25 +00:00
weslambert	f0b7a75ae8	Merge pull request #9904 from Security-Onion-Solutions/fix/curator_clean_up_action_files ... Clean Up Old Curator Action Files	2023-03-07 11:52:28 -05:00
Wes	073054b447	Remove 'so-curator-cluster-warm' and remove unncessary Curator default values	2023-03-07 16:21:55 +00:00
Wes	df94e830c5	Remove unnecessary Curator action files	2023-03-07 16:15:41 +00:00
m0duspwnens	2767d4bee3	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode	2023-03-07 10:36:12 -05:00
m0duspwnens	14aa9ac5c9	apply elastic-fleet state to managers	2023-03-07 10:35:49 -05:00
weslambert	deda0fa279	Merge pull request #9902 from Security-Onion-Solutions/fix/so-status_curator ... Add Curator to so-status Output	2023-03-07 10:17:14 -05:00
Wes	086b3bf528	Add Curator to so-status output	2023-03-07 15:14:53 +00:00
m0duspwnens	691080de88	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode	2023-03-06 16:04:14 -05:00
Josh Brower	3eb839bd21	Merge pull request #9897 from Security-Onion-Solutions/2.4/dev-fleet ... Fleet - setup ES output for all Managers	2023-03-06 15:54:03 -05:00
Josh Brower	a6db2d4502	Fleet - setup ES output for all Managers	2023-03-06 15:50:09 -05:00
m0duspwnens	0f9803120e	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode	2023-03-06 13:55:09 -05:00
m0duspwnens	b6d55bedc8	make influxdb token accessible to all nodes	2023-03-06 13:50:17 -05:00
Josh Brower	8fae826a3a	Merge pull request #9890 from Security-Onion-Solutions/2.4/fixosquerylink ... Fixup osquery SO Hunt link	2023-03-06 07:25:00 -05:00
Doug Burks	1e31966d8d	Merge pull request #9893 from Security-Onion-Solutions/2.4/enable-zeek-vlan ... 2.4/enable zeek vlan	2023-03-06 07:20:45 -05:00
Doug Burks	a2bda07820	add VLAN dashboard	2023-03-05 15:24:11 -05:00
Doug Burks	19ab2a5a46	rename suricata vlan field to network.vlan.id	2023-03-05 05:57:52 -05:00
Josh Brower	9db6df0f14	Initial updates for 2.4 fieldnames	2023-03-04 15:19:19 -05:00
Josh Brower	f0db5cf657	Fixup osquery SO Hunt link	2023-03-04 11:50:01 -05:00
Doug Burks	4a2e75dd8c	fix formatting	2023-03-03 17:16:45 -05:00
Doug Burks	e24296d536	add SOC Dashboards groupby for Zeek conn vlan field	2023-03-03 15:23:43 -05:00
Doug Burks	9940a36722	update Elasticsearch ingest for Zeek conn vlan field	2023-03-03 15:22:43 -05:00