117 Commits

Author	SHA1	Message	Date
Jorge Reyes	cdb7f0602c	Merge pull request #14889 from Security-Onion-Solutions/reyesj2-es-helper ... only show data nodes in disk usage output	2025-07-29 14:45:30 -05:00
reyesj2	07305d8799	only show data nodes in disk usage output	2025-07-29 14:15:43 -05:00
reyesj2	fbf5bafae7	set 2m timeout	2025-07-28 15:17:04 -05:00
reyesj2	d49cd3cb85	increased timeout for so-elasticsearch-roles-load from default of 30s	2025-07-28 15:14:12 -05:00
reyesj2	0b1f2252ee	elasticsearch troubleshoot script	2025-07-17 13:27:54 -05:00
reyesj2	b9d813cef2	typo	2025-07-08 18:26:46 -05:00
reyesj2	d4f0cbcb67	changes for 'generic' integrations with no compoent templates assigned. Default to using the logs-filestream.generic@package componet template	2025-07-08 15:23:46 -05:00
reyesj2	d240fca721	remove usage of temp file	2025-06-03 08:45:04 -05:00
reyesj2	4d6171bde6	rename script ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2025-06-03 07:32:12 -05:00
reyesj2	6238a5b3ed	tighten up search timeframe	2025-06-02 16:31:26 -05:00
reyesj2	061600fa7a	shebang line	2025-06-02 15:55:46 -05:00
reyesj2	1b89cc6818	so-elasticsearch-index-growth script	2025-06-02 15:41:03 -05:00
Doug Burks	bf38055a6c	add echo to end of so-elasticsearch-ilm-stop	2025-05-30 11:41:50 -04:00
Doug Burks	90b8d6b2f7	add echo to end of so-elasticsearch-ilm-start	2025-05-30 11:41:11 -04:00
Doug Burks	45d541d4f2	FIX: so-elasticsearch-ilm-start needs shebang #14688	2025-05-30 09:55:53 -04:00
weslambert	aacd715379	Retry after 1 second	2024-09-25 13:07:01 -04:00
weslambert	50ae37c160	Check if running during soup	2024-09-25 08:25:20 -04:00
m0duspwnens	df14cbad44	fix calls to get_elastic_agent_vars	2024-09-04 17:43:49 -04:00
weslambert	dd09f5b153	Add so-soc-logs	2024-08-26 10:32:27 -04:00
weslambert	d7e3e134a5	Check Elasticsearch for template	2024-08-22 10:33:13 -04:00
weslambert	2a024039bf	Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm ... Create detections.alerts ILM policy with corresponding name	2024-08-21 14:50:10 -04:00
weslambert	88ea60df2a	Fix name	2024-08-21 14:38:57 -04:00
weslambert	c1b7232a88	Fix for detections-alerts	2024-08-21 14:38:29 -04:00
weslambert	4108e67178	Check for endpoint package	2024-08-21 14:22:28 -04:00
weslambert	5f74b1b730	Update column number because of changes to API	2024-08-15 08:26:56 -04:00
Doug Burks	ab63d5dbdb	Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API	2024-08-15 08:01:22 -04:00
weslambert	d833bd0d55	Elastic 8.14.3	2024-07-30 12:45:25 -04:00
weslambert	c60b14e2e7	Merge branch '2.4/dev' into foxtrot	2024-07-30 08:52:48 -04:00
Wes	c55fa6dc6a	Fix pattern for pipelines	2024-07-23 17:48:32 +00:00
weslambert	fe1824aedd	Revert "Elastic 8.14.2"	2024-07-15 11:28:59 -04:00
weslambert	0db0754ee5	Merge pull request #13316 from Security-Onion-Solutions/foxtrot ... Elastic 8.14.2	2024-07-10 08:53:03 -04:00
Wes	1b47d5c622	Changes for Elastic 8.14.1	2024-07-01 15:16:58 +00:00
m0duspwnens	81fcd68e9b	create and use redis:nodes and elasticsearch:nodes pillars	2024-06-20 16:42:11 -04:00
weslambert	deb140e38e	Exclude detections from template name matching	2024-05-21 13:38:52 -04:00
Doug Burks	26cb8d43e1	FIX: so-index-list typo #12988	2024-05-10 08:01:56 -04:00
Doug Burks	a1291e43c3	FIX: so-index-list typo #12988	2024-05-10 07:58:13 -04:00
weslambert	b424426298	Exclude suricata	2024-04-25 09:14:18 -04:00
weslambert	44afa55274	Fix comments about deletion	2024-04-24 17:41:37 -04:00
weslambert	ab832e4bb2	Include logstash-prefixed indices	2024-04-24 17:17:53 -04:00
weslambert	59a02635ed	Change index sorting	2024-04-24 15:18:49 -04:00
Doug Burks	406dda6051	Update so-elasticsearch-cluster-space-used	2024-04-18 11:48:15 -04:00
Doug Burks	229a989914	Update so-elasticsearch-cluster-space-total	2024-04-18 11:47:01 -04:00
Wes	4baf4657f6	Curator cleanup	2023-12-20 19:10:22 +00:00
Doug Burks	d49d13289e	Update so-elastic-clear	2023-12-12 16:37:06 -05:00
Wes	54c3167b10	Delete data streams when necessary	2023-12-12 05:25:50 +00:00
Wes	d203aec44a	Remove Curator	2023-12-08 19:37:06 +00:00
weslambert	02baa18502	Add metrics	2023-11-08 22:41:24 -05:00
weslambert	e39edab00d	Exclude osquery and display failed name	2023-11-08 20:55:08 -05:00
weslambert	acb6e84248	Don't load index template if component template doesn't exist	2023-11-08 20:34:08 -05:00
Jason Ertel	d256be3eb3	allow template loads to partially succeed only on the initial attempt	2023-11-08 10:32:11 -05:00