Commit Graph

98 Commits

Author SHA1 Message Date
Jason Ertel 7fb264b4fe Use double quotes around agent key to ensure interpolation 2020-11-24 17:17:50 -05:00
Jason Ertel d20560385f Remove /nsm/wazuh/etc subdir state since confirmed the Wazuh docker container itself 2020-11-24 16:50:46 -05:00
Jason Ertel e1147398cc Ensure /nsm/wazuh is owned by ossec 2020-11-24 15:48:46 -05:00
Jason Ertel ea9bbfd1aa Improve wazuh agent registration with retry logic to wait for manager to become ready 2020-11-24 13:53:20 -05:00
Jason Ertel 1e32a01657 Create symlink before registration otherwise registration script can't save it's state (.log) file into the conf subdir; add more logging output to track down registration failures 2020-11-23 18:36:19 -05:00
m0duspwnens 1fca5e65df redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-10 15:31:47 -05:00
weslambert 2911e37b70 Don't sleep if not registering agent 2020-11-05 14:03:08 -05:00
William Wernert 3ac9c43b7b Merge branch 'dev' into feature/setup-idempotency 2020-11-04 12:44:14 -05:00
William Wernert 6169758f4e [fix] 0 -> root so file owner is set correctly 2020-11-03 16:47:59 -05:00
Wes Lambert 7dca988c11 Remove Wazuh API creds after registering intial agent 2020-11-03 14:53:50 +00:00
William Wernert 3648e293a1 [fix] Add -L option to curl to respect redirects 2020-10-26 14:08:52 -04:00
weslambert 968dce0aee Adjust Wazuh logging so we don't log alerts to a separate file and so we don't write a separate log file for non-JSON for archives 2020-10-05 10:03:40 -04:00
m0duspwnens 09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens a229ae82ce only allow state to run if it is in top for the node 2020-09-02 16:15:52 -04:00
Mike Reeves 24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
Jason Ertel d1641aa0d8 chown /var/ossec dir to match the needful user/group ownership for ossec-agentd 2020-08-03 15:49:21 -04:00
weslambert c48ba8abaf Re-arrange config 2020-07-29 13:52:12 -04:00
weslambert 9db390023b Increase timeout from 10s to 30s 2020-07-29 13:51:46 -04:00
Wes Lambert ac5aeb4801 Bump Wazuh version 2020-07-27 13:45:34 +00:00
Wes Lambert 51e27cadc8 Add Wazuh Wazuh symlinks for cpnfig/rules 2020-07-27 12:14:43 +00:00
Wes Lambert 958ee25f6d Move Wazuh from /opt/so/ to /nsm/wazuh 2020-07-27 11:58:12 +00:00
weslambert e91aa751a7 Change verbiage 2020-07-17 09:38:43 -04:00
Jason Ertel 8f66a27f07 Refactor image repository to a single variable 2020-07-13 18:26:43 -04:00
m0duspwnens 5ca3ecf4bd fix reference to master grain 2020-07-09 15:42:39 -04:00
m0duspwnens 3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
weslambert 987acaeb7b Add Wazuh Authd Port 2020-07-08 09:26:04 -04:00
Mike Reeves c59096d9bd rename node pillar to elasticsearch 2020-07-07 10:42:12 -04:00
Jason Ertel d146e65412 Remove pre-creation of dirs in favor of having docker image use correct permissions 2020-06-12 01:24:13 -04:00
Jason Ertel 322bb665a1 fix: chgrp all wazuh subdirs accept for api due to Salt symlink issues 2020-06-11 22:34:08 -04:00
Jason Ertel 57a6e4af41 fix: pre-create directory for ossec-analysisd 2020-06-11 13:36:28 -04:00
Jason Ertel 1a85f26cf8 fix: pre-create directory for ossec-analysisd 2020-06-11 13:35:16 -04:00
Jason Ertel b26a7541cd fix: Force ossec group on /opt/so/wazuh dir tree to eliminate permission failures 2020-06-11 09:25:09 -04:00
Jason Ertel e6fcf75181 Re-ordered wazuh setup to avoid agent-service failures due to missing client.keys file; Prepare for user profile settings screen support in reverse proxy 2020-06-02 17:31:51 -04:00
m0duspwnens 5ddfb7ccce fix merge conflicts 2020-05-29 17:31:07 -04:00
m0duspwnens 4dfb58a98c change how whitelist script determines if wazuh is enabled 2020-05-29 17:22:39 -04:00
m0duspwnens fafb469b5c change from default to local - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-26 11:59:00 -04:00
m0duspwnens d0242c1da6 update references of /opt/so/saltstack to /opt/so/saltstack/default. use var default_salt_dir where appropriate - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-21 10:54:47 -04:00
m0duspwnens d4840d203c fix version lock for wazuh 2020-05-20 11:23:55 -04:00
m0duspwnens 92c2222879 ensure wazuh-agent service is enabled and running 2020-05-19 16:59:43 -04:00
m0duspwnens 4f65d17690 https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695 2020-05-19 10:14:40 -04:00
m0duspwnens a6575e7910 prevent wazuh-agent from updating - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/695 2020-05-18 17:00:18 -04:00
m0duspwnens 2f566bf6d7 add so-standalone to agent/wazuh-register-agent 2020-05-15 13:25:31 -04:00
m0duspwnens 1a157eb6a5 add so-standalone to agent/ossec.conf 2020-05-15 13:23:58 -04:00
m0duspwnens 766b56a944 update dockers to 1.2.2 2020-04-23 10:11:26 -04:00
Mike Reeves d9e27a5444 Update Versions 2020-04-15 15:37:59 -04:00
Wes Lambert 0344ea7878 update Wazuh path 2020-02-12 03:34:12 +00:00
Wes Lambert 41db668af6 update Wazuh data paths 2020-02-11 22:16:25 +00:00
Mike Reeves aa578bffba Stop wazzuh directory management 2020-02-11 14:53:54 -05:00
Wes Lambert 76305d42fc dont manage config 2020-02-10 21:21:22 +00:00
Wes Lambert fbeba98af8 change wazuh dir 2020-02-10 20:56:03 +00:00