Commit Graph

5590 Commits

Author SHA1 Message Date
m0duspwnens
a90660c07b ensure salt-latest.repo is absent, salt.minion state include repo.client 2022-01-29 11:04:03 -05:00
m0duspwnens
c8b1e6f501 remove -X from UPGRADECOMMAND so salt-minion starts after upgrade 2022-01-28 15:49:53 -05:00
m0duspwnens
c45efebc7f Merge remote-tracking branch 'remotes/origin/dev' into soup_receiver 2022-01-28 15:27:27 -05:00
m0duspwnens
014696f62f fix receiver append to assigned_hostgroups.local.map.yaml 2022-01-28 15:26:37 -05:00
m0duspwnens
6b18551dd1 skip applying repo.client if airgap and saltupgrade prior to yum clean all 2022-01-28 14:39:10 -05:00
m0duspwnens
75b8d6a0c5 ensure /etc/yum.repos.d/securityonioncache.repo is absent if global:managerupdate = 0 2022-01-28 13:09:48 -05:00
weslambert
5142e6ccc7 Update so-kibana-config-load 2022-01-28 13:01:33 -05:00
Wes Lambert
3b76c2421c Update to allow for passing HL saved objects 2022-01-28 17:59:34 +00:00
m0duspwnens
e82c6a2393 default for managerupdate should be int not a string 2022-01-28 12:50:58 -05:00
m0duspwnens
905ca35e93 use sed instead of echo 2022-01-28 11:19:54 -05:00
m0duspwnens
3977146a16 add receiver to firewall files during soup 2022-01-28 10:36:30 -05:00
m0duspwnens
15c29bda74 dont apply wazuh state on sensors if it is disabled globally - https://github.com/Security-Onion-Solutions/securityonion/issues/7016 2022-01-28 09:31:02 -05:00
Josh Patterson
d0186c8c1b Merge pull request #7011 from Security-Onion-Solutions/fix/reinstall
https://github.com/Security-Onion-Solutions/securityonion/issues/7010
2022-01-27 16:40:37 -05:00
Jason Ertel
ac21bd1e29 Merge pull request #7009 from Security-Onion-Solutions/kilo
Add new abbreviated result limit param
2022-01-27 15:55:42 -05:00
Jason Ertel
14c587fca2 Add new abbreviated result limit param 2022-01-27 15:51:02 -05:00
m0duspwnens
e63f35a223 change to test 2022-01-27 15:19:33 -05:00
weslambert
fc0a5bce86 Revert field limit from testing 2022-01-27 11:18:35 -05:00
weslambert
60a0204975 Revert changes to common template 2022-01-27 11:02:47 -05:00
William Wernert
4532de368a Fix error message printing in so-rule 2022-01-26 16:04:45 -05:00
m0duspwnens
9e2278a199 Merge remote-tracking branch 'remotes/origin/dev' into fix/reinstall 2022-01-26 15:48:46 -05:00
weslambert
8f0a327cb5 Fix Zeek field name so it doesn't conflict with mapping of other dns.answers fields 2022-01-26 15:02:59 -05:00
weslambert
1b3e7f9d79 Temp changes while adjusting mapping 2022-01-26 14:57:16 -05:00
m0duspwnens
c80adc0430 mount repo dir in container same as defined on host 2022-01-26 13:42:56 -05:00
weslambert
e77648c475 Merge pull request #6994 from Security-Onion-Solutions/feature/dtc
Additional DTC changes
2022-01-26 12:22:48 -05:00
Jason Ertel
c2636036ee Merge pull request #6995 from Security-Onion-Solutions/kilo
store related event data as a flattened object blob
2022-01-26 12:21:02 -05:00
Wes Lambert
e10749a495 Additional changes to template to accomodate default fields and keyword subfield 2022-01-26 17:16:29 +00:00
Jason Ertel
ed9b74dc33 store related event data as a flattened object blob 2022-01-26 12:16:05 -05:00
m0duspwnens
2aa19b78da dont remove ca-certificates.crt 2022-01-26 11:27:35 -05:00
m0duspwnens
1337af9d69 more dupes 2022-01-26 11:07:06 -05:00
m0duspwnens
a0e493a186 remove dupe ids 2022-01-26 10:50:35 -05:00
m0duspwnens
a43fb293fc remove role logic 2022-01-26 10:26:52 -05:00
m0duspwnens
8aa002b82e add states to remove ca and ssl keys and certs and call them during reinstall. 2022-01-26 09:33:19 -05:00
m0duspwnens
dd00e3babc use .get since repo may not exist 2022-01-25 13:18:21 -05:00
m0duspwnens
5d2b3992e2 dont need to set ES_PATH_REPO 2022-01-25 13:11:53 -05:00
m0duspwnens
7b6eeac03f dnt mount under /repo in the container 2022-01-25 13:08:46 -05:00
m0duspwnens
00e17d5c78 put repos in /repo in es container 2022-01-25 13:03:54 -05:00
m0duspwnens
a17e1aa87a 930 for group 2022-01-25 13:00:04 -05:00
m0duspwnens
4423e93880 prevent path.repo from being put in elasticsearch.yml if the symlink doesnt exist 2022-01-25 12:57:05 -05:00
m0duspwnens
e62de2934c fix test for es repo 2022-01-25 12:24:03 -05:00
m0duspwnens
a92e2a917b change repos to repo 2022-01-25 10:53:28 -05:00
m0duspwnens
a72f12c4c7 add path.repo mount if symlink exists 2022-01-25 10:50:00 -05:00
Josh Patterson
9a45a9799b Merge pull request #6974 from Security-Onion-Solutions/issue/6599
https://github.com/Security-Onion-Solutions/securityonion/issues/6599
2022-01-25 09:11:33 -05:00
weslambert
ba52bd3835 Update template with syntax fixes 2022-01-25 08:56:03 -05:00
m0duspwnens
edd8709cdd remove export LC_CTYPE="en_US.UTF-8" from soup 2022-01-24 19:42:56 -05:00
m0duspwnens
d6fc436d49 copy files to default salt base 2022-01-24 19:30:34 -05:00
m0duspwnens
82e2b2b611 dont escape raw and endraw 2022-01-24 17:03:25 -05:00
m0duspwnens
d083338350 adding --local 2022-01-24 16:46:29 -05:00
m0duspwnens
e3f1b456e6 add raw end raw back 2022-01-24 16:09:15 -05:00
m0duspwnens
268e07e2a2 remove jinja from soup scripts 2022-01-24 15:49:55 -05:00
Jason Ertel
4ab7a6a079 Merge pull request #6967 from Security-Onion-Solutions/kilo
Copyright year and format update
2022-01-24 10:39:31 -05:00