188 Commits

Author	SHA1	Message	Date
William Wernert	c7c3d004ca	[fix] More helix -> helixsensor	2020-12-15 14:01:19 -05:00
m0duspwnens	4e04f31b8e	remove old firewall ports pillar file https://github.com/Security-Onion-Solutions/securityonion/issues/1586	2020-12-14 10:24:49 -05:00
TOoSmOotH	379f1d98d8	fix addtotab	2020-12-10 09:15:17 -05:00
TOoSmOotH	d6fa739c60	Adding queue=True	2020-12-08 11:17:47 -05:00
Mike Reeves	8ea088c3fc	Restart Elastic on addition of node.	2020-12-07 14:09:41 -05:00
Mike Reeves	d004263b71	Add Elastic Clustering	2020-12-02 14:33:22 -05:00
m0duspwnens	1afa12e607	add elasticsearch template manager pillar and assign to manager node	2020-10-13 16:08:15 -04:00
m0duspwnens	f38519247b	change capture loss to every 5 minutes and default grafana dashboard to 1h	2020-10-08 17:52:02 -04:00
William Wernert	d84f85335e	[fix] Add jinja option, missing log dirs, compress option	2020-10-06 17:18:39 -04:00
William Wernert	b64a91f13c	[refactor] Remove nocompress option	2020-10-06 14:51:43 -04:00
William Wernert	9737b01676	[feat] Move logrotate configuration settings to pillar	2020-10-06 13:22:44 -04:00
William Wernert	f782299281	Remove preconfigured zeeklog + create it during setup	2020-09-28 15:12:36 -04:00
Mike Reeves	0a0e00866c	Upgrade Fun	2020-09-14 14:50:22 -04:00
Mike Reeves	5d4e8925a3	Add Firewall Logic	2020-09-09 21:16:40 -04:00
Mike Reeves	ba192d6c32	Update addtotab.sh	2020-08-17 17:23:25 -04:00
m0duspwnens	5a0df27193	rename importpcap node to import	2020-08-12 10:27:15 -04:00
m0duspwnens	11433b87e6	Merge remote-tracking branch 'remotes/origin/dev' into issue/1049	2020-08-10 16:36:49 -04:00
Mike Reeves	63031a965a	fix ports	2020-08-08 20:48:46 -04:00
Mike Reeves	9708b02387	update pipeline	2020-08-08 18:32:36 -04:00
m0duspwnens	7933bafd55	more fixes for importpcap node	2020-08-07 15:46:45 -04:00
m0duspwnens	9649994f73	add importpcap to pillar/top	2020-08-07 14:40:02 -04:00
Mike Reeves	e7225349a6	Ability to toggle between redis and minio	2020-08-05 22:56:41 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
weslambert	7d432091e2	Remove LS syslog port binding	2020-07-29 08:35:07 -04:00
m0duspwnens	e3efaee864	change reference from bro to zeek	2020-07-17 14:41:44 -04:00
m0duspwnens	e4fff05dbc	load templates for es for eval	2020-07-15 08:30:43 -04:00
m0duspwnens	57bf23d83c	move templates from logstash to elasticsearch	2020-07-14 16:07:46 -04:00
m0duspwnens	13af4cacb0	merge with dev and resolve conflicts	2020-07-10 16:27:10 -04:00
Mike Reeves	46d572fa8c	Fix Filebeat spacing	2020-07-10 15:51:12 -04:00
Mike Reeves	5eb33d5ac7	Logstash Import and Template Assignment	2020-07-10 13:53:55 -04:00
m0duspwnens	24b8f81e38	merge with dev and resolve conflicts	2020-07-10 12:20:14 -04:00
Mike Reeves	bbef7955b2	Update eval.sls	2020-07-10 11:36:46 -04:00
Mike Reeves	3706aa76d8	Add jinja extension	2020-07-10 10:35:31 -04:00
Mike Reeves	9a7035326d	Update Logstash pillar	2020-07-09 17:09:20 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
William Wernert	bd36749959	[feat] Remove navigator container references	2020-06-24 12:38:32 -04:00
m0duspwnens	729a6998a2	Merge remote-tracking branch 'remotes/origin/dev' into issue/739	2020-06-11 16:26:23 -04:00
m0duspwnens	253ffad853	add monint to tab for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739	2020-06-11 16:09:30 -04:00
Mike Reeves	032c8ca4e9	Fix Conflicts	2020-06-11 13:14:11 -04:00
m0duspwnens	9466cc5439	remove firewall pillar from top, add roles to hosts during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641	2020-06-11 08:49:52 -04:00
m0duspwnens	fcb26bdaed	change how ips are added during setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/641	2020-06-10 15:03:34 -04:00
Josh Brower	4e4eeedb41	Initial support - external beats	2020-06-04 22:41:35 -04:00
m0duspwnens	5f9f86caa5	merge with dev and fix conflicts	2020-06-04 09:59:12 -04:00
Wes Lambert	8cac30728b	update Logstash config	2020-06-02 17:36:36 +00:00
m0duspwnens	f5c8091fd6	remove unneeded INITIALSETUP var from addtotab	2020-06-01 12:17:52 -04:00
m0duspwnens	16c6b2b202	dont allow addtotab to run grafana and utility states if it is initial setup - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749	2020-05-27 15:07:49 -04:00
m0duspwnens	b197869a23	remove logic for if states should run or not - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749	2020-05-27 13:46:30 -04:00
m0duspwnens	21f1b423f3	move where in the process addtotab template and data directory are created - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749	2020-05-27 13:43:55 -04:00
m0duspwnens	693000afa8	remove addtotab templates and move surirulelink - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749	2020-05-27 12:30:12 -04:00
m0duspwnens	2467f5636b	only have addtotab.sh run grafana or utility state if masterfw.sls exists	2020-05-26 17:12:47 -04:00