139 Commits

Author	SHA1	Message	Date
Mike Reeves	f9e5ea8ba7	Fix SSL for filebeat	2020-08-19 21:12:41 -04:00
m0duspwnens	dbe14fcbdb	Merge remote-tracking branch 'remotes/origin/dev' into issue/1049	2020-08-12 16:46:03 -04:00
m0duspwnens	0f53b4d703	set esheapsize and filebeat config for import node	2020-08-12 10:39:31 -04:00
Mike Reeves	92cc176b6d	Fix features logic in all states that use it	2020-08-10 20:59:41 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
Wes Lambert	958ee25f6d	Move Wazuh from /opt/so/ to /nsm/wazuh	2020-07-27 11:58:12 +00:00
m0duspwnens	e3efaee864	change reference from bro to zeek	2020-07-17 14:41:44 -04:00
Jason Ertel	9dc1151347	Imported logs are sent to so-import index on eval installations	2020-07-14 22:59:42 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
m0duspwnens	13af4cacb0	merge with dev and resolve conflicts	2020-07-10 16:27:10 -04:00
Mike Reeves	46d572fa8c	Fix Filebeat spacing	2020-07-10 15:51:12 -04:00
Mike Reeves	5eb33d5ac7	Logstash Import and Template Assignment	2020-07-10 13:53:55 -04:00
m0duspwnens	9c2dcd2318	fix reference to master grain	2020-07-09 17:06:44 -04:00
m0duspwnens	5ca3ecf4bd	fix reference to master grain	2020-07-09 15:42:39 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
m0duspwnens	5f68542241	add pillar example for filebeat inputs/output	2020-07-08 09:52:25 -04:00
m0duspwnens	fff713db85	changes for https://github.com/Security-Onion-Solutions/securityonion/issues/825	2020-07-07 15:48:47 -04:00
Wes Lambert	2fdd5fd77b	Fix pillar reference for Strelka/FB	2020-07-07 13:46:57 +00:00
Jason Ertel	96e93b012d	Adjust imports for filebeat configuration to ensure import data is placed into ES	2020-07-01 17:18:01 -04:00
Jason Ertel	d6feafb12a	Correct indentation in filebeat.yaml	2020-07-01 15:39:23 -04:00
Jason Ertel	a3deb868ad	Improve filebeat config indentation	2020-06-30 14:57:34 -04:00
Jason Ertel	930f15eea5	Introduce so-import-pcap tool - WIP	2020-06-30 14:56:08 -04:00
Mike Reeves	79adf2012a	Fix log rotate on Suricata	2020-06-04 10:43:24 -04:00
Mike Reeves	7043bbae9d	Merge remote-tracking branch 'remotes/origin/dev' into feature/metasuri	2020-06-04 09:10:54 -04:00
Wes Lambert	91673a5d70	Update FB config	2020-06-02 17:33:42 +00:00
Mike Reeves	d47acd1d80	Change suricata to hit suricata.common	2020-06-02 11:41:13 -04:00
weslambert	d2263db0ff	Update init.sls	2020-05-28 12:11:08 -04:00
Wes Lambert	5afc05feb2	Update FB init for syslog	2020-05-28 12:35:22 +00:00
Wes Lambert	b9bdca509e	update Filebeat config for syslog	2020-05-28 12:33:41 +00:00
Wes Lambert	3684cdf1c6	Update FB and LS	2020-05-27 17:00:09 +00:00
Mike Reeves	fbbacd205c	Update filebeat.yml	2020-05-18 08:47:03 -04:00
m0duspwnens	766b56a944	update dockers to 1.2.2	2020-04-23 10:11:26 -04:00
Mike Reeves	d9e27a5444	Update Versions	2020-04-15 15:37:59 -04:00
Wes Lambert	e086db3de6	update key name	2020-04-13 16:09:06 +00:00
Mike Reeves	b70d19781d	Fix Filebeat Yaml	2020-04-09 13:58:19 -04:00
Mike Reeves	5a985736e5	Disable Strelka for all things	2020-04-09 11:49:38 -04:00
Mike Reeves	8ffeb0a33d	Fix Wazuh and Strelka	2020-04-09 11:45:45 -04:00
Wes Lambert	ad5626f407	update variables	2020-04-06 13:09:52 +00:00
Wes Lambert	eb0c23387b	specify ES vs LS in FB config	2020-04-02 20:01:49 +00:00
weslambert	26efad1c45	Update Strelka log path	2020-04-01 11:30:02 -04:00
Josh Brower	5ca9a643a8	Merge branch 'dev' into feature/osquery-ingest	2020-04-01 10:19:35 -04:00
Josh Brower	0e76447d11	osquery ingest - initial support	2020-04-01 10:17:36 -04:00
Wes Lambert	6cc757e1de	add strelka index	2020-04-01 13:02:36 +00:00
Wes Lambert	70422809ec	add category	2020-04-01 12:59:10 +00:00
Wes Lambert	9bbcc185aa	change Strelka log location	2020-04-01 12:57:51 +00:00
Wes Lambert	68138e009a	update FB config	2020-03-31 00:37:58 +00:00
Josh Brower	9bcba41882	Feature/Fleet-Standalone	2020-03-24 20:57:24 -04:00
Wes Lambert	150eaf59fd	don't load FB template	2020-03-18 20:05:42 +00:00
Wes Lambert	8bea56eccf	change prospectors to inputs	2020-03-17 15:17:52 +00:00
Wes Lambert	85c1873f4d	switch logging to error	2020-03-14 12:10:06 +00:00