Commit Graph

2311 Commits

Author SHA1 Message Date
m0duspwnens
504d22de83 fix issue lsetcsync if node doesnt have templates defined 2020-03-18 10:49:51 -04:00
weslambert
0d3280feb7 Merge pull request #432 from Security-Onion-Solutions/fix/template
fix strelka pattern
2020-03-18 09:52:24 -04:00
Wes Lambert
29a4932785 fix strelka pattern 2020-03-18 13:47:22 +00:00
weslambert
597f746ccb Merge pull request #431 from Security-Onion-Solutions/fix/elastic_changes
Fix/elastic changes
2020-03-17 17:32:05 -04:00
Wes Lambert
4eac285fd9 change soversion 2020-03-17 21:31:19 +00:00
Wes Lambert
70f109af86 elastic changes 2020-03-17 21:29:28 +00:00
Mike Reeves
73be1d0927 Update Stuff Round 1 2020-03-17 17:06:37 -04:00
Mike Reeves
c3055b0a03 Update Versions for Docker 2020-03-17 15:23:55 -04:00
weslambert
bfefbe247f Merge pull request #430 from Security-Onion-Solutions/kibana_7_dark_mode
UI Dark Mode
2020-03-17 12:19:56 -04:00
weslambert
272649f330 UI Dark Mode 2020-03-17 12:19:27 -04:00
weslambert
caeef9c903 Merge pull request #429 from Security-Onion-Solutions/kibana_7
Update config.json
2020-03-17 11:51:29 -04:00
weslambert
113fbdb863 Update config.json 2020-03-17 11:50:53 -04:00
weslambert
367626c65e Merge pull request #428 from Security-Onion-Solutions/more_ecs
More ecs
2020-03-17 11:23:19 -04:00
Wes Lambert
a5ff21c528 remove agent field for non-Wazuh logs 2020-03-17 15:20:46 +00:00
Wes Lambert
b80e7fedcb remove agent field for non-Wazuh logs 2020-03-17 15:20:31 +00:00
Wes Lambert
488858f8bc remove beat field removal 2020-03-17 15:19:08 +00:00
Wes Lambert
8bea56eccf change prospectors to inputs 2020-03-17 15:17:52 +00:00
Wes Lambert
faea67c9cf update env vars 2020-03-17 15:17:13 +00:00
Wes Lambert
5ed3dbff39 Fix template name 2020-03-17 15:15:01 +00:00
Josh Patterson
2e72816d2a Merge pull request #427 from Security-Onion-Solutions/quickfix/hostnames
ensure name uniformity for elascticsearch and telegraf/grafana
2020-03-17 09:19:27 -04:00
m0duspwnens
cd84f87581 ensure name uniformity for elascticsearch and telegraf/grafana 2020-03-17 09:18:00 -04:00
Josh Patterson
ad0aa85e79 Merge pull request #426 from Security-Onion-Solutions/issue/97
add tojson to dict passed into zeekctl
2020-03-16 10:28:49 -04:00
m0duspwnens
20a6a79551 add tojson to dict passed into zeekctl 2020-03-16 10:28:12 -04:00
weslambert
85f5c53b51 Merge pull request #425 from Security-Onion-Solutions/fix/template_script
Fix/template script
2020-03-14 20:36:17 -04:00
Wes Lambert
81da44b85d fix Logstash Eval SLS 2020-03-15 00:32:29 +00:00
Wes Lambert
26c4d453d3 Add ES templates script 2020-03-15 00:30:59 +00:00
weslambert
775066489a Merge pull request #424 from Security-Onion-Solutions/ecs_parsing
ECS parsing
2020-03-14 08:11:15 -04:00
Wes Lambert
85c1873f4d switch logging to error 2020-03-14 12:10:06 +00:00
Wes Lambert
b6ba8e483d update ES init 2020-03-14 12:06:32 +00:00
Wes Lambert
d2016d3ff2 modify Filebeat config 2020-03-14 12:05:16 +00:00
Wes Lambert
c52220330b modify pipelines 2020-03-14 12:03:32 +00:00
Wes Lambert
d48c2723ba modify default templates 2020-03-14 12:02:52 +00:00
Wes Lambert
9fb3a47358 modify default templates 2020-03-14 12:02:42 +00:00
Wes Lambert
ffc33b15e5 switch to Filebeat 2020-03-14 12:00:17 +00:00
Josh Patterson
a9d286b90f Merge pull request #423 from Security-Onion-Solutions/issue/97
allow all zeekctl configuration options to be defined
2020-03-13 16:12:54 -04:00
m0duspwnens
2bda1f4beb remove whitespace 2020-03-13 16:12:16 -04:00
m0duspwnens
1db9692c6b allow all zeekctl configuration options to be defined - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 16:10:42 -04:00
Josh Patterson
1c4429613d Merge pull request #422 from Security-Onion-Solutions/issue/97
add option to compress archived logs for zeekctl
2020-03-13 15:06:34 -04:00
m0duspwnens
a21ffaecc8 add option to compress archived logs for zeekctl - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 15:05:25 -04:00
Josh Patterson
b18f4eb720 Merge pull request #421 from Security-Onion-Solutions/issue/97
Issue/97
2020-03-13 14:52:34 -04:00
m0duspwnens
da8811bc87 restart zeek docker if zeekctl.cfg changes 2020-03-13 14:44:56 -04:00
m0duspwnens
1b7e22d5bd fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 14:41:16 -04:00
m0duspwnens
8e82633772 fix missing : in playbook state 2020-03-13 13:45:29 -04:00
m0duspwnens
f9cf04e14e fix couple minor issue - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 13:42:28 -04:00
m0duspwnens
bc6aab5b22 add zeekctl.cfg docker file bind 2020-03-13 13:23:27 -04:00
m0duspwnens
3aa48b1a23 first go at managing zeekctl.cfg - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/97 2020-03-13 13:20:48 -04:00
Josh Patterson
762841b14a Merge pull request #417 from Security-Onion-Solutions/issue/134
add salt cron identifiers
2020-03-13 08:43:12 -04:00
m0duspwnens
7ea0b2c284 add salt cron identifiers - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/134 2020-03-13 08:38:45 -04:00
Josh Patterson
1a8c8e4c17 Merge pull request #416 from Security-Onion-Solutions/issue/362
fix spacing for titles in grafana dashboard
2020-03-13 08:10:41 -04:00
m0duspwnens
2d91851c34 fix spacing for titles in grafana dashboard - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/362 2020-03-13 08:08:51 -04:00