Commit Graph

7657 Commits

Author SHA1 Message Date
m0duspwnens 1aa2852ed6 fix logic 2021-06-01 08:35:43 -04:00
Jason Ertel a42a406f53 Remove extra users file mounts; disable elastic anon access when auth enabled 2021-05-29 07:52:08 -04:00
Jason Ertel 47b56e78b3 Fix missing endif 2021-05-28 20:07:51 -04:00
Josh Patterson 52db7b32ef Merge pull request #4335 from Security-Onion-Solutions/pipeline_userpass
fix logic on password created in pillar and fix how me manage
2021-05-28 18:29:59 -04:00
m0duspwnens 3aad5a30e9 fix logic on password created in pillar and fix how me manage 2021-05-28 18:28:53 -04:00
Jason Ertel b8a10f2e86 Support multiple elastic system users 2021-05-28 15:59:51 -04:00
Josh Patterson 4e8dc0e3b9 Merge pull request #4334 from Security-Onion-Solutions/pipeline_userpass
Pipeline userpass
2021-05-28 15:29:07 -04:00
m0duspwnens edf60f80f7 manager and common states now require elasticsearch.auth state 2021-05-28 15:26:26 -04:00
William Wernert a94c598d00 Merge pull request #4333 from Security-Onion-Solutions/feature/show-version-in-setup
Show version in setup
2021-05-28 15:15:43 -04:00
m0duspwnens 68abaa5e3c update auth.map and curl.config to use new elasticsearch:auth pillar format 2021-05-28 14:03:21 -04:00
m0duspwnens 63b31de2b8 add additional users - manage file if user name isnt returned from grepping the file 2021-05-28 13:58:03 -04:00
Mike Reeves eac5c604bd Update packetloss.sh 2021-05-28 12:57:35 -04:00
Mike Reeves e7d8df499c Update HOTFIX 2021-05-28 12:55:57 -04:00
Josh Patterson 35845440c6 Merge pull request #4330 from Security-Onion-Solutions/pipeline_userpass
remove unneeded curl.config template
2021-05-28 10:38:43 -04:00
m0duspwnens 18926009d3 remove unneeded curl.config template 2021-05-28 10:38:06 -04:00
William Wernert d55a9e6274 Add version to all whiptail titles 2021-05-28 10:20:19 -04:00
William Wernert ba011581ef Add version to ending summary 2021-05-28 10:14:58 -04:00
Jason Ertel 1788ceccea Merge pull request #4329 from Security-Onion-Solutions/fix/kibana_7.13.0
bump Kibana version to 7.13.0
2021-05-28 09:14:18 -04:00
doug ada8255af0 bump version to 7.13.0 2021-05-28 08:59:40 -04:00
Josh Patterson f1a6f66d49 Merge pull request #4317 from Security-Onion-Solutions/pipeline_userpass
remove vault pg from when i was testing
2021-05-27 13:55:01 -04:00
m0duspwnens 423793ecf9 remove vault pg from testing 2021-05-27 13:50:22 -04:00
Josh Patterson 94cfa3c9d0 Merge pull request #4314 from Security-Onion-Solutions/pipeline_userpass
Pipeline userpass
2021-05-27 11:34:34 -04:00
m0duspwnens 0134ceef16 merge and resolve conflict in elasticsearch state 2021-05-27 11:33:44 -04:00
m0duspwnens b23ce7462e add depenency 2021-05-27 11:26:25 -04:00
Doug Burks cf3dda6869 Merge pull request #4300 from j-bernal/patch-1
Update so-whiptail
2021-05-27 07:58:16 -04:00
m0duspwnens dc8520df42 user curl.config for curl and elasticscripts 2021-05-26 18:04:30 -04:00
Jason Ertel d9c5976ed0 Merge pull request #4304 from Security-Onion-Solutions/feature/1596
add menu.actions.json and update soc.json
2021-05-26 16:41:30 -04:00
doug aeea5701e4 completely disable both alerts.actions.json and hunt.actions.json 2021-05-26 16:34:05 -04:00
m0duspwnens 7263e35a89 happy little comment 2021-05-26 14:52:59 -04:00
m0duspwnens 4d991d3773 propogate users and users_roles 2021-05-26 14:52:10 -04:00
Mike Reeves bfcde15a24 elastic pipeline test 2021-05-26 14:22:14 -04:00
doug ee675546ac add menu.actions.json and update soc.json 2021-05-26 14:09:00 -04:00
Jason Ertel b43e6c5d6b Salt will handle auto-sync 2021-05-26 13:51:24 -04:00
Jason Ertel c531ef0773 Move user sync'd files to saltstack for grid propagation 2021-05-26 13:44:30 -04:00
Jason Ertel a6a4c03029 Improve error scenarios for user sync; Ensure user sync runs before Elastic container starts 2021-05-26 12:08:10 -04:00
Mike Reeves b525cfc787 Remove old modules 2021-05-26 11:07:53 -04:00
m0duspwnens 842aa97f7e load filebeat modules when es container starts and if fb container is running 2021-05-26 11:00:18 -04:00
Mike Reeves 34d4eedf67 Remove old modules 2021-05-26 10:11:47 -04:00
Josh Brower 4a109d6af1 Merge pull request #4299 from Security-Onion-Solutions/feature/so-pcap-pull
Feature/so-pcap-export
2021-05-26 09:59:45 -04:00
John Bernal cb40a76247 Update so-whiptail
Updated Zeek capitalization when prompting for the number of processes.
2021-05-26 09:55:14 -04:00
Josh Brower ed249600d3 Merge remote-tracking branch 'remotes/origin/dev' into feature/so-pcap-pull 2021-05-26 09:52:58 -04:00
Josh Brower 0187c9d6df Adds so-pcap-export 2021-05-26 09:51:37 -04:00
William Wernert 6da37966d9 Update wording for iso location prompt in soup 2021-05-26 09:32:25 -04:00
m0duspwnens 525d4325c7 define ZEEKLOGLOOKUP in the yaml 2021-05-25 17:18:58 -04:00
m0duspwnens ecf7e25a51 fix merge conflict 2021-05-25 17:16:44 -04:00
Jason Ertel ec2f8fe6c8 Synchronize SOC passwords with Elastic 2021-05-25 17:16:05 -04:00
m0duspwnens dfaf40f583 add zeekloglookup to translate zeeklogs to filebeat filesets 2021-05-25 17:14:26 -04:00
Mike Reeves 543154f037 Remove old modules 2021-05-25 16:58:18 -04:00
Mike Reeves cd3e355f84 Fix zeek depth 2021-05-25 16:54:20 -04:00
m0duspwnens 2eee6b45bc Merge branch 'pipeline' of https://github.com/Security-Onion-Solutions/securityonion into pipeline 2021-05-25 16:52:08 -04:00