Commit Graph

8602 Commits

Author SHA1 Message Date
weslambert cce80eb2fb Change pipeline to 1.8.0 2023-11-07 09:02:48 -05:00
Wes c30a0d5b5b Better error handling and state file management 2023-11-06 14:29:01 +00:00
Wes 74eda68d84 Exit if unable to communicate with Elasticsearch 2023-11-06 13:16:35 +00:00
Josh Brower f6cd35e143 Set execute permissions 2023-11-06 08:03:31 -05:00
Jason Ertel d010af9a24 Merge pull request #11718 from Security-Onion-Solutions/jertel/auto
disregard false positives
2023-11-04 16:32:02 -04:00
Jason Ertel 7a0b21647f disregard false positives 2023-11-04 10:05:37 -04:00
Josh Patterson 610374816d Merge pull request #11714 from Security-Onion-Solutions/change/so-minion
apply es and soc states to manager if new search or hn are added
2023-11-03 16:43:16 -04:00
Josh Brower 0086c24729 Upgrade Elastic Agent 2023-11-03 15:21:06 -04:00
m0duspwnens 9d2b84818f apply es and soc states to manager if new search or hn are added 2023-11-03 15:00:13 -04:00
Mike Reeves 3d8663db66 Update soc_elasticsearch.yaml 2023-11-03 11:29:45 -04:00
Josh Brower a8b0e41dbe exit 0 2023-11-03 11:04:52 -04:00
Jason Ertel 1bc4b44be7 Merge pull request #11709 from Security-Onion-Solutions/jertel/auto
ignore malformed open canary log lines
2023-11-03 09:17:23 -04:00
Jason Ertel 1a3d4a2051 ignore malformed open canary log lines 2023-11-03 09:14:26 -04:00
Josh Brower 8c7767b381 Dont overwrite metadata 2023-11-03 08:41:33 -04:00
Wes 5bfef3f527 Add checkpoint and vsphere templates 2023-11-02 21:10:01 +00:00
Wes 3875970dc5 Add checkpoint and vsphere packages 2023-11-02 21:09:37 +00:00
Jason Ertel 7aa4f28524 Merge pull request #11702 from Security-Onion-Solutions/jertel/auto
ignore connectivity problems to docker containers during startup
2023-11-02 16:48:09 -04:00
Jason Ertel 96fdfb3829 ignore connectivity problems to docker containers during startup 2023-11-02 16:46:41 -04:00
weslambert 51e7861757 Don't source so-elastic-fleet-common if not there 2023-11-02 16:41:34 -04:00
Jason Ertel 6332df04d1 Merge pull request #11695 from Security-Onion-Solutions/jertel/auto
Jertel/auto
2023-11-02 13:07:09 -04:00
Jason Ertel 32701b5941 more log bypass 2023-11-02 12:50:12 -04:00
Josh Brower 0dec6693dc Merge pull request #11678 from Security-Onion-Solutions/2.4/fleetreset
Add Elastic Fleet reset script
2023-11-02 11:33:58 -04:00
Jason Ertel 41a6ab5b4f Merge pull request #11691 from Security-Onion-Solutions/jertel/auto
more log bypass
2023-11-02 10:41:17 -04:00
Jason Ertel e18e0fd69a more log bypass 2023-11-02 10:39:14 -04:00
Josh Patterson 9a76cfe3d3 Merge pull request #11690 from Security-Onion-Solutions/upgrade/salt3006.3v2
fix UPGRADECOMMAND used for distrib salt upgrade. remove unneeded vars
2023-11-02 10:28:29 -04:00
m0duspwnens 6c4dc7cc09 fix UPGRADECOMMAND used for distrib salt upgrade. remove unneeded vars 2023-11-02 10:23:03 -04:00
Josh Brower 5388b92865 Refactor & cleanup 2023-11-02 10:20:32 -04:00
Jason Ertel f932444101 Merge pull request #11689 from Security-Onion-Solutions/jertel/auto
more log bypass
2023-11-02 10:02:13 -04:00
Jason Ertel 1d2518310d more log bypass 2023-11-02 09:59:45 -04:00
weslambert 65735fc4d3 Add eval and import roles 2023-11-02 09:54:01 -04:00
Josh Brower c230cf4eb7 Formatting 2023-11-01 17:00:32 -04:00
Josh Brower 344dd7d61f Add Elastic Fleet reset script 2023-11-01 16:50:20 -04:00
weslambert f9e2940181 Merge pull request #11676 from Security-Onion-Solutions/feature/sublime_platform_integration
Sublime Platform Integration
2023-11-01 16:13:57 -04:00
Wes f33079f1e3 Make settings global 2023-11-01 20:09:56 +00:00
Wes c32935e2e6 Remove optional integration from configuration if not enabled 2023-11-01 17:02:43 +00:00
Wes 655c88cd09 Make sure enabled_nodes is populated 2023-11-01 16:47:51 +00:00
m0duspwnens 4d7b1095b7 Merge remote-tracking branch 'origin/2.4/dev' into fix/soupagrepo 2023-11-01 10:31:59 -04:00
m0duspwnens 338146fedd fix repo update during soup for airgap 2023-11-01 10:19:56 -04:00
Wes bca1194a46 Sublime SOC Action 2023-11-01 14:01:55 +00:00
Wes a0926b7b87 Load optional integrations 2023-11-01 13:59:24 +00:00
Wes 44e45843bf Change optional integration Fleet configuration 2023-11-01 13:52:38 +00:00
Wes 9701d0ac20 Optional integration Fleet configuration 2023-11-01 13:47:20 +00:00
Wes 23ee9c2bb0 Sublime Platform integration 2023-11-01 13:41:40 +00:00
Wes 51247be6b9 Sublime Platform integration defaults 2023-11-01 13:37:52 +00:00
Wes 4dc64400c5 Support document_id 2023-11-01 13:36:32 +00:00
Wes ae45d40eca Add Sublime Platform ingest pipeline 2023-11-01 13:34:30 +00:00
Mike Reeves 497294c363 Delete salt/common/tools/sbin/so-zeek-logs 2023-10-31 12:57:10 -04:00
Mike Reeves cc3a69683c Delete salt/manager/tools/sbin/so-allow-view 2023-10-31 12:55:47 -04:00
Mike Reeves 0c98bd96c7 Delete salt/idstools/tools/sbin/so-rule
UI does this now
2023-10-31 12:52:00 -04:00
Jason Ertel c420e198fb ignore specific Suricata errors 2023-10-31 11:18:39 -04:00