154 Commits

Author	SHA1	Message	Date
weslambert	8eba3426be	Remove extra dash for 'logs-elastic_agent-metricbeat-default' key	2023-03-14 10:51:50 -04:00
weslambert	7c39938e14	Change 'elastic_agent.filebeat' to 'elastic_agent-filebeat'	2023-03-14 10:48:50 -04:00
Wes	766e6a7974	Add 'logs-windows-sysmon_operational-delete' for Windows Sysmon operational indices	2023-03-14 13:51:49 +00:00
Wes	f0d4c16b2b	Add more Elastic Agent index keys for Curator	2023-03-14 13:49:13 +00:00
Wes	412e5c0402	Add more Elastic Agent Curator action files	2023-03-14 13:46:08 +00:00
weslambert	486de12ca5	Delete logs-system-auth-syslog-close.yaml	2023-03-13 17:27:52 -04:00
weslambert	f4112b30c0	Fix index reference for system auth default	2023-03-13 17:27:06 -04:00
weslambert	bab40de58d	Fix system auth default key value	2023-03-13 17:26:05 -04:00
weslambert	785f100132	Fix system auth default key value	2023-03-13 17:25:33 -04:00
weslambert	8ade7b85fc	Fix system syslog default key value	2023-03-13 17:24:40 -04:00
weslambert	c2701f1835	Fix system syslog default key value	2023-03-13 17:24:12 -04:00
weslambert	d5bb223235	Fix system syslog delete file configuration	2023-03-13 17:10:52 -04:00
Wes	efc5832499	Add Elastic Agent default log action files	2023-03-13 20:54:38 +00:00
Wes	8d395dc465	Add Elastic Agent default data stream backing indices for management by Curator	2023-03-13 20:54:13 +00:00
weslambert	2d7ce41a70	Remove reference to 'so-curator-cluster-warm' script since it has been removed	2023-03-07 16:16:55 -05:00
weslambert	e93c052d34	Add the new index format to the global delete action file for Curator	2023-03-07 15:21:53 -05:00
Wes	f50639d2d2	Fix import and syslog actions	2023-03-07 17:41:48 +00:00
Wes	26c9813276	Add keys for new Curator actions to defaults.yaml	2023-03-07 17:29:07 +00:00
Wes	88d98af243	Add new Curator action files to Curator close and delete scripts	2023-03-07 17:21:03 +00:00
Wes	d636546871	Add new Curator action files	2023-03-07 17:15:25 +00:00
Wes	073054b447	Remove 'so-curator-cluster-warm' and remove unncessary Curator default values	2023-03-07 16:21:55 +00:00
Wes	df94e830c5	Remove unnecessary Curator action files	2023-03-07 16:15:41 +00:00
Wes	086b3bf528	Add Curator to so-status output	2023-03-07 15:14:53 +00:00
weslambert	06d1f0f913	Update Curator configuration to align with requirements for Curator 8.0.x	2023-03-02 08:46:52 -05:00
Mike Reeves	af284b9aae	Update init.sls	2023-03-01 16:38:48 -05:00
m0duspwnens	6dd09fb2c5	remove filebeat	2023-02-22 10:42:45 -05:00
m0duspwnens	a37f0fd0c0	rename sosbridge to sobridge	2023-02-03 10:07:07 -05:00
m0duspwnens	f10238da42	fw changes	2023-01-04 16:06:14 -05:00
m0duspwnens	c35a3e122f	add ip to container.add containers to sosbridge	2023-01-03 11:13:50 -05:00
doug	565ca4e94f	keep so-import indices open as in 2.3	2022-12-09 08:49:25 -05:00
m0duspwnens	8c5197c2ea	add line space	2022-10-21 11:49:01 -04:00
m0duspwnens	8b5c79fb39	add so-kratos and so-ossec to curator defaults	2022-10-21 11:21:03 -04:00
m0duspwnens	71eaa715b6	update jinja	2022-10-21 11:09:52 -04:00
m0duspwnens	c880be8d45	use curator defaults.yaml merged with pillar for actions	2022-10-21 10:38:32 -04:00
m0duspwnens	b526532ab6	use global vars in states	2022-10-11 11:57:15 -04:00
Mike Reeves	16f2059f17	Fix yaml for idh,es,kib,esalert	2022-09-09 15:46:48 -04:00
Mike Reeves	2bd9dd80e2	Move In Day	2022-09-07 09:06:25 -04:00
weslambert	dd1d5b1a83	Merge pull request #8270 from Security-Onion-Solutions/fix/curator_actions_delete_kratos ... Add delete and warm action for Kratos indices in applicable Curator delete/warm scripts	2022-07-11 11:39:43 -04:00
weslambert	e82b6fcdec	Typo - Change 'delete' to 'warm'	2022-07-11 11:34:53 -04:00
weslambert	8c8ac41b36	Add action for Kratos indices	2022-07-11 11:32:03 -04:00
weslambert	b611dda143	Add delete action for Kratos indices	2022-07-11 11:31:22 -04:00
Wes Lambert	0b6219d95f	Adjust Curator close scripts to include Kibana and Kratos indices	2022-07-11 14:51:33 +00:00
Wes Lambert	2f729e24d9	Add Curator action files for Kratos indices	2022-07-11 14:34:10 +00:00
Josh Brower	238e671f34	Merge pull request #8129 from Security-Onion-Solutions/fix/curator-cron ... Change curator to daily for true cluster	2022-06-15 11:40:53 -04:00
Josh Brower	072cb3cca2	Change curator to daily for true cluster	2022-06-15 11:38:38 -04:00
Wes Lambert	d111c08fb3	Update Curator commands with new Filebeat module variables	2022-03-18 21:45:33 +00:00
doug	bbced5b52f	FIX: curator should exclude so-case* indices #7270	2022-03-01 14:34:52 -05:00
Doug Burks	f134c74585	FIX: curator should exclude so-case* indices #7270	2022-03-01 14:34:41 -05:00
Wes Lambert	bd1b21a5b6	Revert Endgame index name changes	2022-02-26 02:53:57 +00:00
Mike Reeves	15924ebe0f	Fix endgame index name	2022-02-25 13:29:29 -05:00