5601 Commits

Author	SHA1	Message	Date
Josh Patterson	a02fb37493	Update init.sls	2022-02-02 09:18:02 -05:00
weslambert	367b59188b	Revert back to dns.answers for now	2022-01-31 09:54:39 -05:00
m0duspwnens	4dd0ce9f2c	ensure /etc/yum.repos.d/securityonion.repo is absent if not a manager and managerupdates is enabled	2022-01-31 09:01:18 -05:00
Josh Patterson	0c5b4c6070	Merge pull request #7033 from Security-Onion-Solutions/receiver_grafana ... Receiver grafana	2022-01-31 08:41:56 -05:00
m0duspwnens	e189f10a1b	Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into soup_salt_repo	2022-01-29 11:04:07 -05:00
m0duspwnens	a90660c07b	ensure salt-latest.repo is absent, salt.minion state include repo.client	2022-01-29 11:04:03 -05:00
Doug Burks	bc0a362b39	Move Kibana dashboard update from post_to_2.3.90() to post_to_2.3.100()	2022-01-29 08:02:56 -05:00
m0duspwnens	3aee8656d4	fix %} - add redis to receiver telegraf	2022-01-28 17:45:12 -05:00
m0duspwnens	980a1a0c3d	add redis to receiver telegraf	2022-01-28 17:44:04 -05:00
m0duspwnens	bf26ae8e41	add receiver to allowed dashboards	2022-01-28 17:32:53 -05:00
m0duspwnens	da3e1e402a	add receiver dashboard grafana	2022-01-28 17:27:58 -05:00
m0duspwnens	1cd1ad9214	add inputs for so-receiver to telegraf conf	2022-01-28 17:18:31 -05:00
m0duspwnens	c8b1e6f501	remove -X from UPGRADECOMMAND so salt-minion starts after upgrade	2022-01-28 15:49:53 -05:00
m0duspwnens	c45efebc7f	Merge remote-tracking branch 'remotes/origin/dev' into soup_receiver	2022-01-28 15:27:27 -05:00
m0duspwnens	014696f62f	fix receiver append to assigned_hostgroups.local.map.yaml	2022-01-28 15:26:37 -05:00
m0duspwnens	6b18551dd1	skip applying repo.client if airgap and saltupgrade prior to yum clean all	2022-01-28 14:39:10 -05:00
m0duspwnens	75b8d6a0c5	ensure /etc/yum.repos.d/securityonioncache.repo is absent if global:managerupdate = 0	2022-01-28 13:09:48 -05:00
weslambert	5142e6ccc7	Update so-kibana-config-load	2022-01-28 13:01:33 -05:00
Wes Lambert	3b76c2421c	Update to allow for passing HL saved objects	2022-01-28 17:59:34 +00:00
m0duspwnens	e82c6a2393	default for managerupdate should be int not a string	2022-01-28 12:50:58 -05:00
m0duspwnens	905ca35e93	use sed instead of echo	2022-01-28 11:19:54 -05:00
m0duspwnens	3977146a16	add receiver to firewall files during soup	2022-01-28 10:36:30 -05:00
m0duspwnens	15c29bda74	dont apply wazuh state on sensors if it is disabled globally - https://github.com/Security-Onion-Solutions/securityonion/issues/7016	2022-01-28 09:31:02 -05:00
Josh Patterson	d0186c8c1b	Merge pull request #7011 from Security-Onion-Solutions/fix/reinstall ... https://github.com/Security-Onion-Solutions/securityonion/issues/7010	2022-01-27 16:40:37 -05:00
Jason Ertel	ac21bd1e29	Merge pull request #7009 from Security-Onion-Solutions/kilo ... Add new abbreviated result limit param	2022-01-27 15:55:42 -05:00
Jason Ertel	14c587fca2	Add new abbreviated result limit param	2022-01-27 15:51:02 -05:00
m0duspwnens	e63f35a223	change to test	2022-01-27 15:19:33 -05:00
weslambert	fc0a5bce86	Revert field limit from testing	2022-01-27 11:18:35 -05:00
weslambert	60a0204975	Revert changes to common template	2022-01-27 11:02:47 -05:00
William Wernert	4532de368a	Fix error message printing in so-rule	2022-01-26 16:04:45 -05:00
m0duspwnens	9e2278a199	Merge remote-tracking branch 'remotes/origin/dev' into fix/reinstall	2022-01-26 15:48:46 -05:00
weslambert	8f0a327cb5	Fix Zeek field name so it doesn't conflict with mapping of other dns.answers fields	2022-01-26 15:02:59 -05:00
weslambert	1b3e7f9d79	Temp changes while adjusting mapping	2022-01-26 14:57:16 -05:00
m0duspwnens	c80adc0430	mount repo dir in container same as defined on host	2022-01-26 13:42:56 -05:00
weslambert	e77648c475	Merge pull request #6994 from Security-Onion-Solutions/feature/dtc ... Additional DTC changes	2022-01-26 12:22:48 -05:00
Jason Ertel	c2636036ee	Merge pull request #6995 from Security-Onion-Solutions/kilo ... store related event data as a flattened object blob	2022-01-26 12:21:02 -05:00
Wes Lambert	e10749a495	Additional changes to template to accomodate default fields and keyword subfield	2022-01-26 17:16:29 +00:00
Jason Ertel	ed9b74dc33	store related event data as a flattened object blob	2022-01-26 12:16:05 -05:00
m0duspwnens	2aa19b78da	dont remove ca-certificates.crt	2022-01-26 11:27:35 -05:00
m0duspwnens	1337af9d69	more dupes	2022-01-26 11:07:06 -05:00
m0duspwnens	a0e493a186	remove dupe ids	2022-01-26 10:50:35 -05:00
m0duspwnens	a43fb293fc	remove role logic	2022-01-26 10:26:52 -05:00
m0duspwnens	8aa002b82e	add states to remove ca and ssl keys and certs and call them during reinstall.	2022-01-26 09:33:19 -05:00
m0duspwnens	dd00e3babc	use .get since repo may not exist	2022-01-25 13:18:21 -05:00
m0duspwnens	5d2b3992e2	dont need to set ES_PATH_REPO	2022-01-25 13:11:53 -05:00
m0duspwnens	7b6eeac03f	dnt mount under /repo in the container	2022-01-25 13:08:46 -05:00
m0duspwnens	00e17d5c78	put repos in /repo in es container	2022-01-25 13:03:54 -05:00
m0duspwnens	a17e1aa87a	930 for group	2022-01-25 13:00:04 -05:00
m0duspwnens	4423e93880	prevent path.repo from being put in elasticsearch.yml if the symlink doesnt exist	2022-01-25 12:57:05 -05:00
m0duspwnens	e62de2934c	fix test for es repo	2022-01-25 12:24:03 -05:00