17369 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
reyesj2	b0d9426f1b	automated cert update for kafka fleet output policy	2025-12-02 15:11:00 -06:00
reyesj2	18accae47e	annotation typo	2025-12-02 15:10:29 -06:00
reyesj2	45a8c0acd1	merge 2.4/dev	2025-12-02 11:16:08 -06:00
reyesj2	cc8fb96047	valid config for number_of_replicas in allocate action includes 0	2025-11-24 11:12:09 -06:00
reyesj2	3339b50daf	drop forcemerge when max_num_segements doesn't exist or empty	2025-11-21 16:39:45 -06:00
reyesj2	415ea07a4f	clean up	2025-11-21 16:04:26 -06:00
reyesj2	b80ec95fa8	update regex, revert to default will allow setting value back to '' | None	2025-11-21 14:41:03 -06:00
reyesj2	99cb51482f	unneeded 'set'	2025-11-21 14:32:58 -06:00
reyesj2	90638f7a43	Merge branch 'reyesj2/advea' into reyesj2/advilm	2025-11-21 14:25:28 -06:00
reyesj2	1fb00c8eb6	update so-elastic-fleet-outputs-update to use advanced output options when set, else empty "". Also trigger update_logstash_outputs() when hash of config_yaml has changed	2025-11-21 14:22:42 -06:00
reyesj2	4490ea7635	format EA logstash output adv config items	2025-11-21 14:21:17 -06:00
reyesj2	bce7a20d8b	soc configurable EA logstash output adv settings	2025-11-21 14:19:51 -06:00
reyesj2	b52dd53e29	advanced ilm actions	2025-11-19 13:24:55 -06:00
reyesj2	a155f45036	always update annotation / defaults for managed integrations	2025-11-19 13:24:29 -06:00
Jason Ertel	12d490ad4a	Merge pull request #15240 from Security-Onion-Solutions/jertel/wip ... communicate to the viewer that OS patches may take some time	2025-11-19 10:01:03 -05:00
Jason Ertel	76cbd18d2c	communicate to the viewer that OS patches may take some time	2025-11-19 09:56:42 -05:00
Jorge Reyes	a7337c95e1	Merge pull request #15234 from Security-Onion-Solutions/reyesj2/pipeline-upd ... update zeek pipelines	2025-11-17 10:36:10 -06:00
Josh Patterson	3f7c3326ea	Merge pull request #15237 from Security-Onion-Solutions/bravo ... rm salt keyring and repo file for deb	2025-11-17 09:27:53 -05:00
Josh Patterson	bf41de8c14	rm salt keyring and repo file for deb	2025-11-17 08:56:02 -05:00
reyesj2	de4424fab0	remove typos	2025-11-14 19:15:51 -06:00
reyesj2	136a829509	detect-sqli deprecated in favor of detect-sql-injection	2025-11-14 16:51:00 -06:00
reyesj2	bcec999be4	zeek.dns reduce errors	2025-11-14 15:47:29 -06:00
reyesj2	7c73b4713f	update analyzer pipeline	2025-11-14 15:47:29 -06:00
reyesj2	45b4b1d963	ingest zeek analyzer.log + update dpd dashboard with analyzer tag	2025-11-14 15:47:29 -06:00
reyesj2	fcfd74ec1e	zeek.analyzer format json	2025-11-14 15:47:29 -06:00
reyesj2	68b0cd7549	rename zeek.dpd zeek.analyzer	2025-11-14 15:47:29 -06:00
reyesj2	715d801ce8	format json zeek.dns	2025-11-14 15:47:19 -06:00
Jorge Reyes	4a810696e7	Merge pull request #15231 from Security-Onion-Solutions/reyesj2/bond0 ... fix so-setup error duplicate bond0	2025-11-14 12:12:46 -06:00
reyesj2	6b525a2c21	fix so-setup error duplicate bond0	2025-11-14 11:19:32 -06:00
Jorge Reyes	a5d8385f07	Merge pull request #15230 from Security-Onion-Solutions/reyesj2/pipeline-upd ... suricata pipeline updates	2025-11-14 10:43:33 -06:00
reyesj2	211bf7e77b	ignore errors on tld script	2025-11-14 09:25:19 -06:00
reyesj2	1542b74133	move dns tld fields to its own pipeline	2025-11-14 09:24:58 -06:00
reyesj2	4314c79f85	bump suricata dns logging version	2025-11-14 08:24:31 -06:00
reyesj2	da9717bc79	don't attempt rename if field doesn't exist -- reducing pipeline stat errors	2025-11-14 08:15:40 -06:00
Jason Ertel	045cf7866c	Merge pull request #15225 from Security-Onion-Solutions/jertel/wip ... pcap annotations	2025-11-14 08:37:37 -05:00
reyesj2	431e0b0780	format suricata.alert json	2025-11-13 19:29:50 -06:00
reyesj2	e782266caa	suricata 8 dns v3	2025-11-13 19:21:31 -06:00
coreyogburn	a4666b2c08	Merge pull request #15229 from Security-Onion-Solutions/cogburn/toggle-models ... Add Enabled Flag to Models	2025-11-13 16:13:24 -07:00
Corey Ogburn	dcc3206e51	Add Enabled Flag to Models	2025-11-13 15:32:28 -07:00
Josh Patterson	8358b6ea6f	Merge pull request #15228 from Security-Onion-Solutions/bravo ... wait for 200 from registry before proceeding	2025-11-13 16:34:43 -05:00
coreyogburn	d1a66a91c6	Merge pull request #15221 from Security-Onion-Solutions/cogburn/compress-context ... CompressContextPrompt	2025-11-13 14:33:56 -07:00
Josh Patterson	7fdcb92614	wait for 200 from registry before proceeding	2025-11-13 16:30:58 -05:00
Jason Ertel	cec1890b6b	pcap annotations	2025-11-13 16:15:47 -05:00
Corey Ogburn	b1b66045ea	Change in prompt wording	2025-11-13 12:08:47 -07:00
Corey Ogburn	33b22bf2e4	Shorten Prompt	2025-11-13 11:09:09 -07:00
Corey Ogburn	3a38886345	CompressContextPrompt	2025-11-13 11:09:08 -07:00
reyesj2	7be70faab6	format json	2025-11-13 10:49:37 -06:00
Josh Patterson	2729fdbea6	Merge pull request #15223 from Security-Onion-Solutions/bravo ... configure salt, then install. update bootstrap-salt. reduce salt install fail timeout	2025-11-13 11:35:43 -05:00
Jorge Reyes	bfd08d1d2e	Merge pull request #15204 from Security-Onion-Solutions/reyesj2/retention ... update so-elasticsearch-retention-estimate	2025-11-13 10:05:49 -06:00
Josh Patterson	fed75c7b39	use -r with bootstrap to disable script repo	2025-11-12 19:47:25 -05:00