47 Commits

Author	SHA1	Message	Date
Mike Reeves	521de8f154	Update 9997_output_helix.conf	2020-02-10 22:47:11 -05:00
Mike Reeves	6ceb127c46	Fix Wazuh paths for logstash/fb	2020-02-07 08:52:09 -05:00
Wes Lambert	ec11b9ea25	Remove Redis config from eval PL	2020-02-05 20:34:32 +00:00
m0duspwnens	799cf32265	fix logstash for so-helix role	2020-02-05 14:45:07 -05:00
Josh Brower	c1dd26d97e	Logstash EVAL pipeline fix - osquery	2020-02-05 08:12:08 -05:00
m0duspwnens	68e7dcfba0	evalfix	2020-01-30 17:38:48 -05:00
m0duspwnens	88967c2512	evalfix	2020-01-30 17:36:38 -05:00
m0duspwnens	d94065fa00	evalfix	2020-01-30 17:09:06 -05:00
m0duspwnens	306cc1127b	heavynode	2020-01-29 12:56:25 -05:00
m0duspwnens	a39edad3f6	changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124	2020-01-21 16:39:42 -05:00
m0duspwnens	ed28be4ba9	rename logstash config for storage to search - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/176	2019-12-20 11:32:55 -05:00
Mike Reeves	fdbb223155	Helix - Add geo	2019-12-13 11:52:43 -05:00
Mike Reeves	e134071295	Helix - Change Parsers for Helix	2019-12-10 13:50:27 -05:00
Mike Reeves	4c4cdb7189	Helix changes and Wazuh	2019-12-09 16:27:03 -05:00
Mike Reeves	362cd0487f	Additional Helix Support	2019-12-09 09:52:52 -05:00
Mike Reeves	f3c204c790	Disable Beats input - Update sensoroni version	2019-11-06 13:37:42 -05:00
Josh Brower	4dbc5f07b2	Enable 0006_input_beats.conf by default on EVAL	2019-10-25 10:19:05 -04:00
doug	8472b24a67	parse Bro logs using Elasticsearch ingest node	2019-09-23 16:04:23 -04:00
Mike Reeves	b6fd6fa2cc	PCAP module - fix dir	2019-06-19 22:10:09 -04:00
Mike Reeves	f8b6b752b6	Logstash - Fix filebeat	2019-06-18 10:30:00 -04:00
Mike Reeves	9c1e128ca0	Logstash Module - Add new input conf	2019-06-10 18:44:10 -04:00
Mike Reeves	d9b1caf044	Logstash Module - Add new input conf	2019-06-10 18:33:09 -04:00
Mike Reeves	8663da0330	Logstash Module - Disable stuff that isn't used in eval	2019-03-18 10:23:43 -04:00
Mike Reeves	c8102fe7b5	Logstash Module - Disable stuff that isn't used in eval	2019-03-18 10:17:33 -04:00
Mike Reeves	70e8db5991	Logstash Module - Add the osquery configs	2019-01-24 20:27:57 -05:00
Josh Brower	bc7bf5774a	Enable osquery parsers for EVAL role	2019-01-01 11:14:38 -05:00
Wes Lambert	5c28576674	Logtash - Update input for Eval Mode	2018-12-06 02:38:59 +00:00
Mike Reeves	b88a9b5769	Logstash Module - Wes Mods	2018-11-13 14:41:07 -05:00
Mike Reeves	16172d894e	Logstash Module - Remove .eval	2018-11-02 13:24:28 -04:00
Mike Reeves	39677afa74	Logstash Module - Add new logstash config for eval	2018-11-01 17:41:11 -04:00
Mike Reeves	b42e25d250	LogStash Module - Fix Eval Logstash config	2018-10-31 11:25:36 -04:00
Mike Reeves	a90e095687	LogStash Module - Fix Eval Logstash config	2018-10-31 11:24:58 -04:00
Mike Reeves	61c30243ff	Logstash Module - Disable freq and modify some configs	2018-10-16 15:27:01 -04:00
Mike Reeves	f6eff97407	Logstash Module - Disable freq and modify some configs	2018-10-16 15:25:41 -04:00
Mike Reeves	b0293c24b5	Logstash Module - Disable freq and modify some configs	2018-10-16 14:53:48 -04:00
Mike Reeves	cd823a26f3	Logstash Module - Change some parsing order	2018-10-15 19:24:01 -04:00
Mike Reeves	25bd58c9e6	Logstash Module - Add some dynamic scripts	2018-10-04 14:37:22 -04:00
Mike Reeves	2376d8e68f	Logstash Module - Change filename so correct config gets applied	2018-09-19 14:21:42 -04:00
Mike Reeves	263ad7ef50	Logstash Module - Add dynamics to storage node config	2018-09-19 13:44:58 -04:00
Mike Reeves	93d85d6ef8	Logstash Module - Enable the new output and input dynamic files	2018-09-14 15:01:05 -04:00
Mike Reeves	9696c77bd3	Fix several sytax errors	2018-08-08 10:02:43 -04:00
Mike Reeves	6f05f788f1	Logstash Module - SSL updates	2018-06-07 16:55:12 -04:00
Mike Reeves	4739f3e9e9	Logstash Module - Fix an issue with logstash config	2018-05-24 21:01:48 -04:00
Mike Reeves	2cec72b970	Logstash Module - Saltify some inputs	2018-05-18 13:44:23 -04:00
Mike Reeves	5508d24dc6	Logstash Module - Add redis input	2018-05-18 13:36:42 -04:00
Mike Reeves	f27b1de048	Logstash Module - Add plugin config for parser node	2018-05-18 11:23:41 -04:00
Mike Reeves	1b390c433c	Logstash Module - Add plugin config based on node type	2018-05-17 15:29:45 -04:00