Commit Graph

12898 Commits

Author SHA1 Message Date
Doug Burks
e83afa3e30 Merge pull request #10660 from Security-Onion-Solutions/dougburks-patch-1
Update README.md
2023-06-26 08:33:22 -04:00
Doug Burks
70fb28a8b3 Update README.md 2023-06-26 08:31:41 -04:00
Josh Brower
8355432356 Merge pull request #10657 from Security-Onion-Solutions/2.4/policy-name-fix
2.4/policy name fix
2023-06-24 19:00:00 -04:00
Josh Brower
2247cafe5f Change policy name 2023-06-24 17:13:28 -04:00
Josh Brower
85a8da6331 Change policy name 2023-06-24 16:58:36 -04:00
Josh Brower
ddabab253c Merge pull request #10653 from Security-Onion-Solutions/2.4/heavynode
2.4/heavynode
2023-06-23 19:55:24 -04:00
Jason Ertel
2e42eddbc2 Merge pull request #10656 from Security-Onion-Solutions/jertel/fix-import
fix agent extract error during install; simplify logic
2023-06-23 17:21:39 -04:00
Jason Ertel
07a590dda8 fix agent extract error during install; simplify logic 2023-06-23 17:17:59 -04:00
Mike Reeves
ec8eac3430 soup fix 2023-06-23 17:05:41 -04:00
weslambert
05b84327b8 Fix typo 2023-06-23 16:32:57 -04:00
Mike Reeves
0607532e4a soup fix 2023-06-23 16:20:41 -04:00
Mike Reeves
3018886f72 soup fix 2023-06-23 16:13:04 -04:00
weslambert
e02bdffe34 Fix typos 2023-06-23 16:10:22 -04:00
Mike Reeves
5073d62ee8 soup fix 2023-06-23 16:09:57 -04:00
weslambert
e2ff48164b Only load if so-elastic-fleet-common exists 2023-06-23 16:03:58 -04:00
Mike Reeves
43832f9c34 soup fix 2023-06-23 16:03:51 -04:00
Mike Reeves
5da5a04025 soup fix 2023-06-23 16:00:02 -04:00
Mike Reeves
25b51135fc soup fix 2023-06-23 15:58:20 -04:00
weslambert
aa91c1fef2 Add empty object for index_settings 2023-06-23 15:57:30 -04:00
Mike Reeves
801a5a6824 soup fix 2023-06-23 15:56:15 -04:00
Mike Reeves
f63c26b7f2 soup fix 2023-06-23 15:50:54 -04:00
Josh Brower
336a40d646 Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/heavynode 2023-06-23 15:50:14 -04:00
Josh Brower
bb0cfc5253 Create & assign Heavy Node Fleet Policy 2023-06-23 15:49:03 -04:00
coreyogburn
106aaa9c3e Merge pull request #10652 from Security-Onion-Solutions/cogburn/10122
FIX: Exclude System logs from Hunt/Dashboard Queries.
2023-06-23 13:48:17 -06:00
weslambert
ff7db0be63 Remove old index settings 2023-06-23 15:31:11 -04:00
Wes
b96d3473f2 Fix indentation 2023-06-23 18:38:04 +00:00
Corey Ogburn
fb27e7c479 Also add to dashboard
Duplicate new queryToggleFilter from hunt to dashboard.
2023-06-23 11:30:26 -06:00
Corey Ogburn
261acee8a0 New Hunt queryToggleFilter
New filter to exclude soc logs from hunt results.
2023-06-23 11:30:26 -06:00
Josh Brower
a9585b2a7f Fix Elastic Agent for Heavy 2023-06-23 10:45:58 -04:00
Wes
62fa15c63e Add more templates 2023-06-23 14:43:15 +00:00
weslambert
e995576b1d Remove extra templates 2023-06-23 09:41:49 -04:00
Jason Ertel
d247c9d704 Merge pull request #10648 from Security-Onion-Solutions/jertel/fix-import
use cluster-unique password for import encryption
2023-06-23 09:40:26 -04:00
Jason Ertel
b21b545756 use cluster-unique password for import encryption 2023-06-23 09:37:41 -04:00
Wes
5e8748c436 Load Elasticsearch templates 2023-06-23 13:28:01 +00:00
Wes
e2cca917c1 Add package load command to Fleet setup 2023-06-23 13:26:06 +00:00
Wes
d8700137d2 Add updated so-elasticsearch-templates-load 2023-06-23 13:23:29 +00:00
Wes
2c42d4b19e Add package check to so-elasticsearch-templates-load 2023-06-23 13:22:51 +00:00
Wes
a3c7e40c40 Add package load command 2023-06-23 13:20:05 +00:00
Wes
94fe456e28 Add package functions 2023-06-23 13:19:20 +00:00
Wes
662db41857 Add default packages 2023-06-23 13:17:38 +00:00
Jason Ertel
7623dd20b9 Merge pull request #10644 from Security-Onion-Solutions/cogburn/salt-relay-fix
WIP: Fix `salt cmd.run` commands for importing
2023-06-22 20:31:19 -04:00
Corey Ogburn
2b323ab661 Fix salt cmd.run commands for importing
Functional and easy to read.
2023-06-22 17:30:56 -06:00
Josh Brower
8de01625a8 Add Elastic Agent container for Heavy Nodes 2023-06-22 16:02:42 -04:00
Josh Brower
d0d7ab57ca Add Elastic Agent container for Heavy Nodes 2023-06-22 16:02:17 -04:00
Jason Ertel
f4cbe20ddf Merge pull request #10641 from Security-Onion-Solutions/jertel/fix-import
fix quotations
2023-06-22 14:46:41 -04:00
Jason Ertel
0d92a1594a fix quotations 2023-06-22 14:41:39 -04:00
m0duspwnens
daaead618e Merge remote-tracking branch 'origin/2.4/dev' into 2.4/heavynode 2023-06-22 13:26:56 -04:00
m0duspwnens
19469205e1 include eval and import in so-elasticsearch-cluster-settings 2023-06-22 13:12:47 -04:00
Jason Ertel
cae9e6230f Merge pull request #10638 from Security-Onion-Solutions/cogburn/import-fix
Change upload path
2023-06-22 13:04:22 -04:00
m0duspwnens
6c4c815683 change so-elasticsearch-cluster settings to include heavynode, and only run on managers 2023-06-22 13:04:20 -04:00