Commit Graph

2128 Commits

Author SHA1 Message Date
Mike Reeves 3681f91c37 Suricata Conn 2020-06-15 21:46:04 -04:00
Jason Ertel 97d127218a fix: stop updating salt mine - this is an attempt to sort out why the CA intermittently disappears from the mine 2020-06-15 17:40:58 -04:00
m0duspwnens fe39179ba1 fix so-status for searchnode 2020-06-15 17:01:23 -04:00
m0duspwnens 91a50c0915 place searchnode role with node where referenced 2020-06-15 16:58:30 -04:00
m0duspwnens b396c39352 fix for master not having a node:mainip pillar - playbook 2020-06-15 15:13:29 -04:00
Josh Patterson 1a6fc3ef6c Merge pull request #852 from Security-Onion-Solutions/quickfix/fleetfwsetup
add firewall rules for fleet standalone
2020-06-15 13:51:39 -04:00
m0duspwnens 51e500f521 add firewall rules for fleet standalone 2020-06-15 13:50:37 -04:00
Wes Lambert f3c9f2e5ea update templates 2020-06-15 16:57:46 +00:00
Wes Lambert 206261fbe6 rename id to log.id.fuid for X509 2020-06-15 16:55:14 +00:00
Wes Lambert 18547e8ea8 enforce field types 2020-06-15 16:54:33 +00:00
m0duspwnens dc56c449b7 add another pillar default to self hostgroup 2020-06-15 10:38:58 -04:00
Jason Ertel 87514e7da3 revert: Use consistent casing for package names 2020-06-14 09:47:59 -04:00
Jason Ertel 8b64f5b499 Use consistent casing for package names 2020-06-13 10:19:24 -04:00
m0duspwnens ce5d678ed9 change portgroup assignment for dockernet on searchnode 2020-06-12 17:09:08 -04:00
m0duspwnens a125a94808 fix issue with ssl state that prevented other node types being adding to a standalone node 2020-06-12 16:24:46 -04:00
Josh Patterson 1f305352a0 Merge pull request #844 from Security-Onion-Solutions/quickfix/addfwrules
Quickfix/addfwrules
2020-06-12 15:04:04 -04:00
Doug Burks befc793a96 Improve files query #804 2020-06-12 14:25:38 -04:00
Doug Burks d157c0da00 Improve DNS queries #804 2020-06-12 14:21:36 -04:00
Jason Ertel b3d2ce0e18 support applying the firewall state directly from so-firewall 2020-06-12 13:52:24 -04:00
Mike Reeves 03e410df68 Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri 2020-06-12 12:30:52 -04:00
Mike Reeves 6058d438bf Fix Protocol 2020-06-12 12:28:29 -04:00
Mike Reeves 42938a4e67 Add the makor Suricata parsers 2020-06-12 12:14:48 -04:00
m0duspwnens 3c0caa4112 Merge remote-tracking branch 'remotes/origin/dev' into quickfix/addfwrules 2020-06-12 11:40:34 -04:00
Doug Burks 0b2dd5d0a4 add event.dataset to default hunt output view #841 2020-06-12 11:37:55 -04:00
m0duspwnens 1f0509cfd6 update so-allow for wazuh and syslog 2020-06-12 11:35:18 -04:00
m0duspwnens d02bff22ac adding fw rules to master nodes for wazuh and syslog 2020-06-12 11:27:28 -04:00
Doug Burks 3cc936a0a8 add event.dataset to default hunt output view #841 2020-06-12 11:13:56 -04:00
Mike Reeves 0559e2d16b Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri 2020-06-12 08:54:17 -04:00
Jason Ertel d146e65412 Remove pre-creation of dirs in favor of having docker image use correct permissions 2020-06-12 01:24:13 -04:00
Jason Ertel 322bb665a1 fix: chgrp all wazuh subdirs accept for api due to Salt symlink issues 2020-06-11 22:34:08 -04:00
m0duspwnens 729a6998a2 Merge remote-tracking branch 'remotes/origin/dev' into issue/739 2020-06-11 16:26:23 -04:00
m0duspwnens 56a821a9be update standalone grafana dashboard 2020-06-11 16:24:52 -04:00
m0duspwnens b6fa01aafe fix monint for standalone grafana dashboard - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 16:21:33 -04:00
Mike Reeves 6f3fd407dd Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri 2020-06-11 16:00:38 -04:00
m0duspwnens f8b6a80d99 adding standalone grafana dashboard 2020-06-11 15:57:35 -04:00
m0duspwnens 101673dc98 fix telegraf for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 15:35:06 -04:00
m0duspwnens bf8278dccf add telegraf elasticsearch input for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 15:08:42 -04:00
m0duspwnens 73bb375662 have telegraf get data for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 14:48:03 -04:00
Josh Patterson c3a2c2321d Merge pull request #837 from Security-Onion-Solutions/issue/641
Issue/641
2020-06-11 14:22:28 -04:00
Jason Ertel 57a6e4af41 fix: pre-create directory for ossec-analysisd 2020-06-11 13:36:28 -04:00
Jason Ertel 1a85f26cf8 fix: pre-create directory for ossec-analysisd 2020-06-11 13:35:16 -04:00
Mike Reeves 032c8ca4e9 Fix Conflicts 2020-06-11 13:14:11 -04:00
Mike Reeves 9bed02934b Merge branch 'issue/641' of https://github.com/Security-Onion-Solutions/securityonion-saltstack into issue/641 2020-06-11 13:03:31 -04:00
Mike Reeves a37faff850 New so-allow 2020-06-11 13:03:21 -04:00
Josh Patterson 16592fcc1e makedirs if it doesn't exist 2020-06-11 12:55:30 -04:00
Josh Brower 1c86ae4e14 Merge pull request #836 from Security-Onion-Solutions/bugfix/misc
Fleet gen packages hostname fix2
2020-06-11 11:45:30 -04:00
Josh Brower ab143b3216 Fleet gen packages hostname fix2 2020-06-11 11:44:56 -04:00
m0duspwnens 985c55dd62 fix state name duplicate conflict - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 10:39:30 -04:00
m0duspwnens 32b4a2ff08 adding grafana dashboard for standalone - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/739 2020-06-11 10:28:29 -04:00
Jason Ertel b26a7541cd fix: Force ossec group on /opt/so/wazuh dir tree to eliminate permission failures 2020-06-11 09:25:09 -04:00