Commit Graph

2928 Commits

Author SHA1 Message Date
Doug Burks
b004a9149e Update so-index-list 2020-10-13 12:40:45 -04:00
Doug Burks
e5ece6cd50 Update so-index-list 2020-10-13 12:34:49 -04:00
Jason Ertel
2ad6ab7dfc Dynamically alter docs URL based on airgap setting 2020-10-13 12:29:59 -04:00
Doug Burks
a75e986836 Update so-elastic-clear 2020-10-13 12:18:27 -04:00
Mike Reeves
c388966e7e Add airgap config 2020-10-13 12:05:19 -04:00
Doug Burks
ad50b5d640 elasticsearch _cat/indices output has changed between 6 and 7 2020-10-13 06:33:40 -04:00
Doug Burks
21b1becd7e Update so-elasticsearch-pipelines-list 2020-10-12 16:34:30 -04:00
Doug Burks
5458c57cc9 Update so-elasticsearch-pipeline-stats 2020-10-12 16:32:11 -04:00
Doug Burks
68e34b781a Update so-elasticsearch-templates-load 2020-10-12 16:10:38 -04:00
Doug Burks
4c43262610 Update so-elasticsearch-templates-list 2020-10-12 16:08:06 -04:00
Wes Lambert
14559b081d Ensure Zeek logs without ts field have an @timestamp field associated 2020-10-12 17:19:23 +00:00
Wes Lambert
4fc4913d1e Don't predefine index date for Filebeat ES outputs 2020-10-12 15:44:00 +00:00
Wes Lambert
884cc2d054 Don't predefine index date for Logstash outputs 2020-10-12 15:41:47 +00:00
Doug Burks
553ce3e363 only include extra_hosts if nodestab exists 2020-10-12 10:13:05 -04:00
Mike Reeves
f5cfd480a3 Moar encryptions 2020-10-12 09:12:36 -04:00
Mike Reeves
9695e63950 fix template statement 2020-10-11 17:21:57 -04:00
Mike Reeves
96083e1458 update logstash outputs 2020-10-11 17:06:56 -04:00
Mike Reeves
deb0f640d6 add jinja templates 2020-10-11 17:02:07 -04:00
Mike Reeves
b7c4fd94c4 get pipelines to load 2020-10-11 16:57:08 -04:00
Mike Reeves
e4ce17d4de Turn on SSL output 2020-10-11 16:10:55 -04:00
Mike Reeves
a7bd1c2ce5 Turn on SSL output 2020-10-11 15:58:12 -04:00
Mike Reeves
29c3948f95 Fix soc.json 2020-10-11 14:09:14 -04:00
Mike Reeves
31e0b5c81c Add nodes to soc.json 2020-10-11 11:28:49 -04:00
Mike Reeves
73aade1223 Enable rest access from manager to sn 2020-10-11 11:02:20 -04:00
Mike Reeves
271e40337b Enable jinja for tls 2020-10-11 10:57:04 -04:00
Mike Reeves
f6f9097cd9 Enable tls for 9200 on search capable nodes 2020-10-11 10:53:54 -04:00
Doug Burks
3cfee82b59 Update Hunt fields for firewall #1500 2020-10-10 08:18:00 -04:00
Doug Burks
87574181d5 Add Community ID to pfsense filterlog #1501 2020-10-10 08:11:51 -04:00
Doug Burks
5f15320b9d Update Hunt fields for firewall #1500 2020-10-10 07:54:48 -04:00
Doug Burks
8d1ba1f4db fix pfsense firewall udp parsing 2020-10-10 07:38:47 -04:00
Doug Burks
8cfabf101c Update Hunt query for firewall #1499 2020-10-10 07:17:49 -04:00
Doug Burks
9aa4112de1 Remove extra comma 2020-10-10 06:10:10 -04:00
Wes Lambert
28a1f7f88a Remove pfsense tag 2020-10-10 00:03:51 +00:00
Wes Lambert
b55ffa44f8 Fix module,dataset rename 2020-10-10 00:01:37 +00:00
Wes Lambert
69a04dedd3 Filterlog config changes 2020-10-09 23:56:52 +00:00
m0duspwnens
ea1324e498 fix LOSS calc line 2020-10-09 11:54:39 -04:00
m0duspwnens
3f007b6af7 Merge remote-tracking branch 'remotes/origin/dev' into issue/1403 2020-10-09 11:40:01 -04:00
m0duspwnens
f5cacd66b8 correct zeekcaptureloss script to work on zeek standalone 2020-10-09 11:39:44 -04:00
Jason Ertel
40ff628c0b Replace simple pillar lookup with salt equivalent to ensure quoted values are handled properly 2020-10-09 11:10:46 -04:00
William Wernert
97fce74263 [fix] Rename playbook key and add new admin/automation psswds 2020-10-09 09:59:08 -04:00
William Wernert
d7961fdbb8 Merge branch 'dev' of github.com:Security-Onion-Solutions/securityonion into dev 2020-10-09 08:51:45 -04:00
William Wernert
5a8d776a62 [ix] Correct sls syntax 2020-10-09 08:51:35 -04:00
m0duspwnens
f38519247b change capture loss to every 5 minutes and default grafana dashboard to 1h 2020-10-08 17:52:02 -04:00
William Wernert
065fe9042d [fix] Make sure Playbook is up before creating user 2020-10-08 17:01:12 -04:00
weslambert
06706d29f2 Ensure pipelines with dots in names can be referenced 2020-10-08 15:41:17 -04:00
Wes Lambert
1efb39a71b Add pipeline stats script 2020-10-08 19:11:41 +00:00
m0duspwnens
52e8265511 update is_airgap for soup 2020-10-08 14:16:19 -04:00
Mike Reeves
26317efe79 Update Soup 2020-10-08 14:05:52 -04:00
William Wernert
2ad3f9da11 [fix] Wazuh not saving .log files anymore, only check .json files 2020-10-08 12:41:51 -04:00
William Wernert
034750fe5b Merge branch 'dev' into feature/rotate-logs
# Conflicts:
#	setup/so-functions
2020-10-08 12:36:30 -04:00