reyesj2
|
8c4cf0ba08
|
keep hard failure
|
2025-04-22 07:29:12 -05:00 |
|
reyesj2
|
e17fea849a
|
continue loop after encountering error with first
|
2025-04-21 20:32:42 -05:00 |
|
reyesj2
|
166e4e0ebc
|
make bool
|
2025-04-21 15:51:36 -05:00 |
|
reyesj2
|
4b7478654f
|
run optional integrations script so packages get installed. Hold updates unless auto_update_integrations is set
|
2025-04-21 14:29:37 -05:00 |
|
reyesj2
|
4e6c707067
|
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/fix-14516
|
2025-04-21 10:48:25 -05:00 |
|
reyesj2
|
c89adce3a1
|
default disable automatic upgrades for optional integration packages & policies
|
2025-04-21 10:48:18 -05:00 |
|
Mike Reeves
|
af1bee4c68
|
Merge pull request #14556 from Security-Onion-Solutions/TOoSmOotH-patch-4
Disable Elasticsearch delete delete
|
2025-04-21 08:57:13 -04:00 |
|
Mike Reeves
|
e3c8d22cac
|
Update enabled.sls
|
2025-04-18 16:43:17 -04:00 |
|
Josh Brower
|
3f13f8deae
|
Merge pull request #14543 from Security-Onion-Solutions/2.4/kratos_identity
Support Kratos user.name lookup
|
2025-04-17 16:13:58 -04:00 |
|
Jason Ertel
|
13d96ae5af
|
Merge pull request #14551 from Security-Onion-Solutions/jertel/wip
additional grid support
|
2025-04-17 12:54:28 -04:00 |
|
Jason Ertel
|
3b447b343f
|
fix typo
|
2025-04-17 11:51:45 -04:00 |
|
Jason Ertel
|
d0375d3c7e
|
fix typo
|
2025-04-17 11:51:21 -04:00 |
|
Jason Ertel
|
b607689993
|
improve regex
|
2025-04-17 11:47:52 -04:00 |
|
Jason Ertel
|
8f1e528f1c
|
improve regex
|
2025-04-17 11:09:39 -04:00 |
|
Jason Ertel
|
2f8d8d2d96
|
Merge branch '2.4/dev' into jertel/wip
|
2025-04-16 15:55:34 -04:00 |
|
Jason Ertel
|
366e39950a
|
subord annotations; ensure node reboots occur in background
|
2025-04-16 15:55:16 -04:00 |
|
Josh Brower
|
5fd7bf311d
|
Add fallback
|
2025-04-15 13:57:55 -04:00 |
|
Josh Brower
|
152fdaa7bb
|
Support Kratos user.name lookup
|
2025-04-15 11:40:43 -04:00 |
|
Jorge Reyes
|
7f5cde9a1c
|
Merge pull request #14540 from Security-Onion-Solutions/reyesj2/fix-14417
FIX: Add log.origin.file.line to base templates
|
2025-04-14 15:46:54 -05:00 |
|
reyesj2
|
58df566c79
|
add mapping for metadata.kafka.timestamp
|
2025-04-14 14:30:40 -05:00 |
|
reyesj2
|
395b81ffc6
|
FIX: Add log.origin.file.line to base templates #14417
|
2025-04-14 14:30:00 -05:00 |
|
Jorge Reyes
|
e3d5829b89
|
Merge pull request #14539 from Security-Onion-Solutions/reyesj2-patch-1
fix kafka delayed initial connection with remote clients on multi-broker deployments
|
2025-04-14 13:06:20 -05:00 |
|
reyesj2
|
df31c349b0
|
update annotations
|
2025-04-14 12:32:31 -05:00 |
|
reyesj2
|
759d5f76cd
|
fix kafka external access slow to establish initial connection
|
2025-04-14 12:32:22 -05:00 |
|
Josh Brower
|
240484deea
|
Merge pull request #14537 from Security-Onion-Solutions/2.4/idstoolsfix
Run so-rule-update when it changes
|
2025-04-14 11:20:32 -04:00 |
|
Josh Brower
|
ceabb673e0
|
Refactor for so-rule-update
|
2025-04-14 11:08:35 -04:00 |
|
Jorge Reyes
|
f1070992a8
|
Merge pull request #14538 from Security-Onion-Solutions/reyesj2-patch-5
|
2025-04-14 08:41:35 -05:00 |
|
reyesj2
|
c0f9c344bb
|
set logstash log rollover when log size exceeds 1G
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-04-14 08:13:27 -05:00 |
|
Josh Brower
|
00029e6f83
|
Run so-rule-update when it changes
|
2025-04-14 08:04:46 -04:00 |
|
reyesj2
|
9459bf8a27
|
allow larger kafka log files before forcing rollover
|
2025-04-11 14:41:32 -05:00 |
|
Josh Patterson
|
96e99fc442
|
Merge pull request #14535 from Security-Onion-Solutions/mineimp
ensure the highstate retry runs only once
|
2025-04-11 14:43:17 -04:00 |
|
Josh Patterson
|
4b14bf90a3
|
ensure the highstate retry runs only once
|
2025-04-11 14:28:18 -04:00 |
|
reyesj2
|
2cb002668f
|
restrict count of kafka log files
|
2025-04-11 12:32:49 -05:00 |
|
Jorge Reyes
|
c11a10638b
|
Merge pull request #14528 from Security-Onion-Solutions/reyesj2-patch-4
external access to kafka topics via user/pass auth
|
2025-04-11 10:52:40 -05:00 |
|
reyesj2
|
6fe240de45
|
remove whitespaces then check for empty string as password
|
2025-04-11 10:42:45 -05:00 |
|
reyesj2
|
ecd7da540a
|
skip user entries that don't have password configured
|
2025-04-11 10:21:46 -05:00 |
|
Josh Brower
|
2a43a6f37e
|
Merge pull request #14532 from Security-Onion-Solutions/2.4/saltlogs
Fix comma
|
2025-04-11 07:51:35 -04:00 |
|
Josh Brower
|
4cdfb6e3eb
|
Fix comma
|
2025-04-11 07:49:35 -04:00 |
|
Josh Brower
|
1edd13523c
|
Merge pull request #14530 from Security-Onion-Solutions/fix/detections
Change timeout to 1s
|
2025-04-11 07:47:38 -04:00 |
|
Josh Brower
|
4217e23272
|
Merge pull request #14531 from Security-Onion-Solutions/2.4/saltlogs
Extract log level and drop INFO level
|
2025-04-11 07:47:25 -04:00 |
|
Josh Brower
|
f94c81a041
|
Extract log level and drop INFO level
|
2025-04-11 07:45:12 -04:00 |
|
Josh Brower
|
4c3518385b
|
Change timeout to 1s
|
2025-04-11 07:37:09 -04:00 |
|
reyesj2
|
1429226667
|
nest default value for external_access under kafka:config
|
2025-04-10 15:55:17 -05:00 |
|
reyesj2
|
5498673fc3
|
group events in 10s and remove deprecated output configuration option
|
2025-04-10 09:46:37 -05:00 |
|
reyesj2
|
96c56297ce
|
external access via user/pass
|
2025-04-09 22:08:13 -05:00 |
|
Jason Ertel
|
270958ddfc
|
Merge pull request #14502 from Security-Onion-Solutions/jertel/wip
support background actions via config UI
|
2025-04-04 11:27:36 -04:00 |
|
Jason Ertel
|
b99bb0b004
|
support options field on actions
|
2025-04-04 11:19:30 -04:00 |
|
Jason Ertel
|
9c455badb9
|
support background actions via config UI
|
2025-04-03 13:08:44 -04:00 |
|
Josh Patterson
|
275489b8a3
|
Merge pull request #14499 from Security-Onion-Solutions/strelkaFix
Add missing scanners and fix forcedType for Strelka SOC UI annotations. Restart Strelka containers on config change.
|
2025-04-02 11:56:44 -04:00 |
|
Josh Patterson
|
cd6deae0a7
|
add missing strelka backend scanners to SOC UI annotation file
|
2025-04-02 11:20:12 -04:00 |
|