Josh Patterson
|
fe4129c8e0
|
env discovery.type single-node change
only managers and heavynodes are eligible for discovery.type=single-node
|
2025-01-29 09:11:52 -05:00 |
|
m0duspwnens
|
3c85b48291
|
manage with contents to simplify salt cloud profile file_map
|
2025-01-29 08:12:50 -05:00 |
|
m0duspwnens
|
ea2e026c56
|
only manager nodes or heavynodes should ever be single-node
|
2025-01-29 08:10:05 -05:00 |
|
m0duspwnens
|
8b3f310212
|
install python3-dnf-plugin-versionlock on vm before first highstate
|
2025-01-29 04:08:30 -05:00 |
|
m0duspwnens
|
87136e9e2b
|
restart salt-minion to trigger highstate
|
2025-01-28 16:38:20 -05:00 |
|
m0duspwnens
|
5a6a9d6ec2
|
round ES_HEAP_SIZE
|
2025-01-28 16:01:49 -05:00 |
|
m0duspwnens
|
d3b3a0eb8a
|
wrap salt-cloud -yd. start implementing vm/minion cleanup with ip removal
|
2025-01-28 14:04:58 -05:00 |
|
m0duspwnens
|
91fc59cffc
|
add removehost option to so-firewall. add logging to console and so-firewall.log
|
2025-01-28 14:04:02 -05:00 |
|
m0duspwnens
|
e32dbad0d0
|
fix monitoring for add_ files
|
2025-01-28 11:22:26 -05:00 |
|
Jorge Reyes
|
8828a3049d
|
Merge pull request #14155 from Security-Onion-Solutions/reyesj2/es-integ-tmp
add additional weird_integration
|
2025-01-27 16:36:17 -06:00 |
|
reyesj2
|
d74b69d84d
|
add additional weird_integration
|
2025-01-27 16:34:33 -06:00 |
|
m0duspwnens
|
b66aafd168
|
fix claiming for cpu/mem
|
2025-01-27 17:24:04 -05:00 |
|
m0duspwnens
|
2cd0f69069
|
watch and build
|
2025-01-27 16:40:10 -05:00 |
|
m0duspwnens
|
0177f641c8
|
watch for files and create a vm
|
2025-01-27 15:09:42 -05:00 |
|
Jorge Reyes
|
abcfe638c9
|
Merge pull request #14153 from Security-Onion-Solutions/reyesj2/es-integ-tmp
Reyesj2/es integ tmp
|
2025-01-27 14:07:32 -06:00 |
|
Joshua Brower
|
49ab0751c0
|
Remove uneeded import
|
2025-01-27 15:01:21 -05:00 |
|
Joshua Brower
|
e994f3a220
|
Fix commits
|
2025-01-27 14:48:50 -05:00 |
|
reyesj2
|
38b0276458
|
remove reference to deleted file
|
2025-01-27 13:45:18 -06:00 |
|
reyesj2
|
a373d96c3c
|
run managed_soc_annotations.sls from manager state
|
2025-01-27 13:45:03 -06:00 |
|
m0duspwnens
|
b3969a6ce0
|
fix hardware passthrough for pci devices
|
2025-01-24 17:19:41 -05:00 |
|
m0duspwnens
|
ab97d3b8b7
|
ensure 64962 patch applies to manager for salt-cloud
|
2025-01-24 11:26:34 -05:00 |
|
Josh Brower
|
97a3f130c8
|
Update Elastic
|
2025-01-23 15:32:39 -05:00 |
|
reyesj2
|
5b8f8fb62f
|
add/remove es annotations/defaults automagically
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-23 12:47:22 -06:00 |
|
m0duspwnens
|
213df68d04
|
merge with 120 dev and fix conflicts
|
2025-01-23 10:56:48 -05:00 |
|
Josh Brower
|
9738ef382c
|
Upgrade Elastic to 8.17.1
|
2025-01-23 08:12:02 -05:00 |
|
Jason Ertel
|
ca0c1170ab
|
Merge pull request #14140 from Security-Onion-Solutions/jertel/wip
fix issue with first-time api client permission toggling
|
2025-01-22 17:43:54 -05:00 |
|
Jason Ertel
|
db9387764d
|
fix issue with first-time api client permission toggling
|
2025-01-22 17:41:04 -05:00 |
|
reyesj2
|
e0039a08ef
|
fix forcedType typo
|
2025-01-22 13:57:26 -06:00 |
|
Jorge Reyes
|
09df4a5771
|
Merge pull request #14139 from Security-Onion-Solutions/reyesj2/es-integ-tmp
fixes merging local pillar /global overrides for generated index temp…
|
2025-01-22 13:12:53 -06:00 |
|
reyesj2
|
81ac1ebc08
|
fixes merging local pillar /global overrides for generated index templates
|
2025-01-22 13:12:09 -06:00 |
|
Jorge Reyes
|
c2f5c2226f
|
Merge pull request #14138 from Security-Onion-Solutions/reyesj2/es-integ-tmp
add back missing component for http_endpoint_x_generic & winlog_x_win…
|
2025-01-22 10:16:30 -06:00 |
|
reyesj2
|
d779f7ae7f
|
add back missing component for http_endpoint_x_generic & winlog_x_winglog
|
2025-01-22 10:15:16 -06:00 |
|
Jorge Reyes
|
d26c7e6f9b
|
Merge pull request #14134 from Security-Onion-Solutions/reyesj2/es-integ-tmp
remove individual <integration>@custom mappings. Moved over to so-fle…
|
2025-01-21 11:00:18 -06:00 |
|
reyesj2
|
6331298eac
|
remove individual <integration>@custom mappings. Moved over to so-fleet_integrations.ip_mappings-1
|
2025-01-21 10:49:54 -06:00 |
|
reyesj2
|
76abf37351
|
Merge remote-tracking branch 'origin/2.4/dev' into foxtrot
|
2025-01-21 09:03:04 -06:00 |
|
m0duspwnens
|
9db3cd901c
|
update documentation of core functionality
|
2025-01-18 10:45:10 -05:00 |
|
m0duspwnens
|
64c9230423
|
prevent conflicts with network manager in base vm
|
2025-01-18 10:44:44 -05:00 |
|
m0duspwnens
|
17943ef0db
|
add hypervisor state to hypervisor node
|
2025-01-18 08:24:50 -05:00 |
|
m0duspwnens
|
8ed3f0b1cc
|
change base image path for so-salt-cloud
|
2025-01-18 07:30:36 -05:00 |
|
m0duspwnens
|
7c50a5e17b
|
cloud-init needs to import repo gpg keys so packags can install
|
2025-01-17 23:16:18 -05:00 |
|
m0duspwnens
|
c13c85bd2d
|
manager needs ssh config. need -r to ignore bootstrap provided repos
|
2025-01-17 22:54:46 -05:00 |
|
m0duspwnens
|
ae01dc9639
|
manager needs more packages for salt-cloud. change location of priv key for salt-cloud config
|
2025-01-17 22:26:39 -05:00 |
|
m0duspwnens
|
a74ed0daf0
|
fix disabling cloud-init and system shutdown. increase ram/cpu of base vm. shrink disk_size to 6G for testing
|
2025-01-17 21:25:40 -05:00 |
|
m0duspwnens
|
60387651d2
|
recreate the base vm if any of the cloud init files change
|
2025-01-17 20:13:42 -05:00 |
|
m0duspwnens
|
3a78be68d6
|
ensure cloud-init is removed
|
2025-01-17 20:05:35 -05:00 |
|
m0duspwnens
|
a896332db3
|
fix deprecation
|
2025-01-17 19:49:41 -05:00 |
|
m0duspwnens
|
54eeb0e327
|
handle refreshing base image and reinstalling the vm if the source qcow2 image changes
|
2025-01-17 19:27:04 -05:00 |
|
Jorge Reyes
|
704e30219a
|
Merge pull request #14124 from Security-Onion-Solutions/reyesj2-patch-8
keep imported data in logs-import-so index
|
2025-01-17 13:33:26 -06:00 |
|
reyesj2
|
1396083b7d
|
use so-elasticsearch-query where possible; simplify suricata.alerts index reroute
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-01-17 13:29:46 -06:00 |
|
Jason Ertel
|
7017024ba7
|
Merge pull request #14123 from Security-Onion-Solutions/jertel/wip
Additional web security measures
|
2025-01-17 12:31:42 -05:00 |
|