Wes Lambert
|
14559b081d
|
Ensure Zeek logs without ts field have an @timestamp field associated
|
2020-10-12 17:19:23 +00:00 |
|
Wes Lambert
|
02d2e5e2c6
|
Fix isue with null Zeek server IP
|
2020-09-30 17:53:30 +00:00 |
|
Josh Brower
|
bff86ea802
|
zeek.common ingest parser fix
|
2020-05-21 14:35:25 -04:00 |
|
Josh Brower
|
c74ace89ba
|
Initial support - Ingest community_id
|
2020-05-21 14:34:00 -04:00 |
|
Doug Burks
|
58d59c6844
|
use null safe operator for source.port and destination.port
https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/594
|
2020-05-15 14:58:21 -04:00 |
|
Wes Lambert
|
59787a6532
|
update parsing for Zeek files
|
2020-04-14 13:08:31 +00:00 |
|
Wes Lambert
|
e023aeb9be
|
use agent name for observer name
|
2020-04-01 21:27:25 +00:00 |
|
Wes Lambert
|
eacd3c9bfd
|
update zeek.common
|
2020-03-31 00:36:42 +00:00 |
|
Wes Lambert
|
b80e7fedcb
|
remove agent field for non-Wazuh logs
|
2020-03-17 15:20:31 +00:00 |
|
Wes Lambert
|
c52220330b
|
modify pipelines
|
2020-03-14 12:03:32 +00:00 |
|
Wes Lambert
|
9ad16e8c71
|
upadte ingest config
|
2020-03-11 12:13:53 +00:00 |
|