Josh Brower
|
e83e54936e
|
Temp disable Elastic Registry Repo
|
2023-01-19 07:25:25 -05:00 |
|
weslambert
|
90f3e33cc6
|
Merge pull request #9597 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_priority_modification
Modify default 'logs-*' Elasticsearch template priority
|
2023-01-18 17:30:52 -05:00 |
|
weslambert
|
7a499c9051
|
Modify default 'logs-*' template priority
|
2023-01-18 17:24:07 -05:00 |
|
m0duspwnens
|
1eafb8d62a
|
reload salt modules when docker is installed
|
2023-01-18 13:46:06 -05:00 |
|
m0duspwnens
|
d501b0fac9
|
add elastic agent to assigned hostgroups
|
2023-01-18 09:46:55 -05:00 |
|
weslambert
|
1bf088e976
|
Merge pull request #9591 from Security-Onion-Solutions/fix/kibana_basepath_rewrite_disable
Disable Kibana's native base path rewrite and add publicBaseUrl
|
2023-01-17 16:59:06 -05:00 |
|
weslambert
|
1fed3cf474
|
Disable Kibana's native base path rewrite and add publicBaseUrl
|
2023-01-17 16:54:31 -05:00 |
|
Josh Patterson
|
e0f8315d27
|
Merge pull request #9590 from Security-Onion-Solutions/2.4/firewall
create /opt/so/ for non manager nodes during setup
|
2023-01-17 15:36:34 -05:00 |
|
m0duspwnens
|
dbfe176b45
|
create /opt/so/ for non manager nodes during setup
|
2023-01-17 14:15:44 -05:00 |
|
Josh Patterson
|
2842178396
|
Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall
fix iptables
|
2023-01-17 13:50:16 -05:00 |
|
m0duspwnens
|
aa858bab45
|
fix iptables
|
2023-01-17 13:48:39 -05:00 |
|
weslambert
|
1723f58c04
|
Merge pull request #9579 from Security-Onion-Solutions/fix/elasticsearch_templates_so-ids
Remove so-ids since the data stream is now 'logs-suricata-*'
|
2023-01-13 16:17:38 -05:00 |
|
weslambert
|
ca80548bf0
|
Remove so-ids since the data stream is now 'logs-suricata-*'
|
2023-01-13 16:15:58 -05:00 |
|
weslambert
|
3e5127810d
|
Merge pull request #9577 from Security-Onion-Solutions/fix/elasticsearch_elastic_agent_templates
Make sure Elastic Agent data streams do not use replicas
|
2023-01-13 16:12:09 -05:00 |
|
weslambert
|
73a4dae28e
|
Make sure Elastic Agent data streams do not use replicas
|
2023-01-13 16:10:44 -05:00 |
|
Josh Patterson
|
3efca0010a
|
Merge pull request #9573 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-13 12:41:58 -05:00 |
|
m0duspwnens
|
3653df4d5f
|
spell it right
|
2023-01-13 10:18:13 -05:00 |
|
m0duspwnens
|
6033e9a0de
|
use port_bindings from docker defaults in docker states
|
2023-01-13 10:15:10 -05:00 |
|
weslambert
|
7cba5626b7
|
Merge pull request #9570 from Security-Onion-Solutions/fix/elasticsearch_templates_elastic_agent
Change priority for Elastic Agent Elasticsearch index templates
|
2023-01-12 16:48:12 -05:00 |
|
m0duspwnens
|
a69b0951d3
|
add strelka containers
|
2023-01-12 16:47:34 -05:00 |
|
weslambert
|
654d869e3e
|
Change priority from 500 to 200 for Elastic Agent index templates to avoid collisions with other templates
|
2023-01-12 16:46:08 -05:00 |
|
m0duspwnens
|
d163d834d4
|
allow for binding ip and ports to different port number
|
2023-01-12 16:42:45 -05:00 |
|
weslambert
|
be6b42494c
|
Merge pull request #9569 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_kratos
Kratos Index Changes
|
2023-01-12 15:33:51 -05:00 |
|
weslambert
|
fb8d8ea972
|
Update Elasticsearch index template for Kratos
|
2023-01-12 15:31:41 -05:00 |
|
weslambert
|
9416552338
|
Don't set the Kratos index explicitly
|
2023-01-12 15:25:35 -05:00 |
|
Mike Reeves
|
6c8b17d4d1
|
Merge pull request #9567 from Security-Onion-Solutions/mkr24
Fix nsm
|
2023-01-12 10:43:42 -05:00 |
|
Mike Reeves
|
8c5a060a80
|
Fix nsm
|
2023-01-12 10:41:54 -05:00 |
|
weslambert
|
66f9a06458
|
Merge pull request #9566 from Security-Onion-Solutions/fix/elastic_fleet_integration_policy_load
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
|
2023-01-11 16:17:40 -05:00 |
|
Wes
|
0e437f84e7
|
Add back echo statement to print the import policy being loaded
|
2023-01-11 21:13:30 +00:00 |
|
Wes
|
ea01e68846
|
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
|
2023-01-11 21:01:31 +00:00 |
|
Josh Patterson
|
add71cbdee
|
Merge pull request #9565 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-11 15:04:25 -05:00 |
|
Mike Reeves
|
60d476457a
|
Merge pull request #9564 from Security-Onion-Solutions/TOoSmOotH-patch-5
Update 0900_input_redis.conf.jinja
|
2023-01-11 14:54:40 -05:00 |
|
m0duspwnens
|
80f65fcd62
|
remove 514/tcp from filebeat for now
|
2023-01-11 14:54:05 -05:00 |
|
Mike Reeves
|
66924b63a7
|
Update 9999_output_redis.conf.jinja
|
2023-01-11 14:53:16 -05:00 |
|
Mike Reeves
|
bdaed849ea
|
Update 0900_input_redis.conf.jinja
|
2023-01-11 14:52:32 -05:00 |
|
m0duspwnens
|
0d45c1583e
|
add so-filebeat docker container ports and add to standalone
|
2023-01-11 14:48:20 -05:00 |
|
m0duspwnens
|
81e07997f0
|
add so-elastic-fleet docker container ports and add to standalone
|
2023-01-11 14:28:35 -05:00 |
|
Mike Reeves
|
4923fb1c35
|
Merge pull request #9563 from Security-Onion-Solutions/mkr24
Optimize reinstall process
|
2023-01-11 12:44:52 -05:00 |
|
Mike Reeves
|
8fa8b89d9c
|
Fix reinstall logic
|
2023-01-11 12:43:22 -05:00 |
|
Mike Reeves
|
bab010a109
|
Fix reinstall logic
|
2023-01-11 12:40:18 -05:00 |
|
Mike Reeves
|
c07821a612
|
Fix reinstall logic
|
2023-01-11 12:32:43 -05:00 |
|
weslambert
|
acad7acc4a
|
Merge pull request #9562 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_load_suricata_import
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
|
2023-01-11 12:27:37 -05:00 |
|
Mike Reeves
|
b36f1bc79e
|
Fix reinstall logic
|
2023-01-11 12:26:50 -05:00 |
|
weslambert
|
4391c22335
|
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
|
2023-01-11 12:23:50 -05:00 |
|
weslambert
|
39d1f07fab
|
Merge pull request #9561 from Security-Onion-Solutions/fix/filebeat_remove_module_setup
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
|
2023-01-11 12:21:39 -05:00 |
|
Mike Reeves
|
35e0a78cad
|
Fix reinstall logic
|
2023-01-11 12:20:57 -05:00 |
|
weslambert
|
b3e0183e39
|
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
|
2023-01-11 12:19:06 -05:00 |
|
Mike Reeves
|
708ba13721
|
Fix reinstall logic
|
2023-01-11 12:18:02 -05:00 |
|
Mike Reeves
|
eee433e8c4
|
Fix reinstall logic
|
2023-01-11 12:17:13 -05:00 |
|
Mike Reeves
|
cd57ff9820
|
Fix reinstall logic
|
2023-01-11 12:16:18 -05:00 |
|