Commit Graph

5626 Commits

Author SHA1 Message Date
Wes Lambert
1366e5288e Add mappings references for new component templates to index templates 2022-02-07 19:54:23 +00:00
Wes Lambert
03bfb052ed Add component templates for Elasticsearch, Kibana, Logstash, Netflow, Suricata, and Zeek 2022-02-07 19:42:24 +00:00
weslambert
c9b40d8569 Merge pull request #7136 from Security-Onion-Solutions/feature/so_es_indices_list_sort
Sort index listing alphabetically and add header
2022-02-07 09:34:58 -05:00
Wes Lambert
50215c550b Sort index listing alphabetically and add header (@gebhard73) 2022-02-07 14:31:42 +00:00
Josh Patterson
ee17064585 Merge pull request #7122 from Security-Onion-Solutions/soup_docker_iso
Soup docker iso
2022-02-07 09:29:35 -05:00
Josh Patterson
e0c0eba24e Update soup 2022-02-07 09:23:30 -05:00
Josh Patterson
7d09d1f7e2 Update soup 2022-02-07 09:22:43 -05:00
Mike Reeves
abd121733f Merge branch 'master' into mastermerger 2022-02-07 08:34:17 -05:00
m0duspwnens
7c31eb1288 mount iso at different point 2022-02-04 16:07:06 -05:00
m0duspwnens
780aace854 set AGDOCKER 2022-02-04 15:44:25 -05:00
m0duspwnens
eb0696b425 update dockers if -f used 2022-02-04 15:36:44 -05:00
m0duspwnens
267ef354c2 unmount iso after updating dockers 2022-02-04 15:09:35 -05:00
m0duspwnens
23fbf140ba soup with dockers from iso 2022-02-04 15:06:42 -05:00
Wes Lambert
317f6471d8 Add additional scan and rule filset mappings 2022-02-04 19:05:09 +00:00
Wes Lambert
1ce8bb3523 Fix winlog mapping reference reversion 2022-02-04 18:14:01 +00:00
Wes Lambert
5e03b1a5de Fix reference for file mappings in template 2022-02-04 18:11:03 +00:00
weslambert
898db542bf Merge pull request #7117 from Security-Onion-Solutions/feature/winlog_dtc_mappings
Add winlog mappings
2022-02-04 12:16:16 -05:00
Wes Lambert
69cb83cac9 Add winlog mappings 2022-02-04 17:08:26 +00:00
Wes Lambert
f3902cf77d Fix EG template and mappings 2022-02-04 16:00:16 +00:00
Wes Lambert
a3031b2b5c Additional DTC mapping changes 2022-02-04 15:38:51 +00:00
Wes Lambert
1ce386bb7f Add more DTC transition mappings 2022-02-03 17:33:05 +00:00
weslambert
c5b5c5858e Rename to prevent field conflict 2022-02-02 14:31:46 -05:00
Mike Reeves
0e28e1e4cb Merge pull request #7066 from Security-Onion-Solutions/TOoSmOotH-patch-1
Update acng.conf
2022-02-02 09:22:00 -05:00
Josh Patterson
a02fb37493 Update init.sls 2022-02-02 09:18:02 -05:00
Mike Reeves
eaeed07fd4 Update acng.conf 2022-02-02 09:12:29 -05:00
Wes Lambert
9db1510b0e Initial composable template configuration and base mappings 2022-02-02 02:08:31 +00:00
weslambert
367b59188b Revert back to dns.answers for now 2022-01-31 09:54:39 -05:00
m0duspwnens
4dd0ce9f2c ensure /etc/yum.repos.d/securityonion.repo is absent if not a manager and managerupdates is enabled 2022-01-31 09:01:18 -05:00
Josh Patterson
0c5b4c6070 Merge pull request #7033 from Security-Onion-Solutions/receiver_grafana
Receiver grafana
2022-01-31 08:41:56 -05:00
m0duspwnens
e189f10a1b Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into soup_salt_repo 2022-01-29 11:04:07 -05:00
m0duspwnens
a90660c07b ensure salt-latest.repo is absent, salt.minion state include repo.client 2022-01-29 11:04:03 -05:00
Doug Burks
bc0a362b39 Move Kibana dashboard update from post_to_2.3.90() to post_to_2.3.100() 2022-01-29 08:02:56 -05:00
m0duspwnens
3aee8656d4 fix %} - add redis to receiver telegraf 2022-01-28 17:45:12 -05:00
m0duspwnens
980a1a0c3d add redis to receiver telegraf 2022-01-28 17:44:04 -05:00
m0duspwnens
bf26ae8e41 add receiver to allowed dashboards 2022-01-28 17:32:53 -05:00
m0duspwnens
da3e1e402a add receiver dashboard grafana 2022-01-28 17:27:58 -05:00
m0duspwnens
1cd1ad9214 add inputs for so-receiver to telegraf conf 2022-01-28 17:18:31 -05:00
m0duspwnens
c8b1e6f501 remove -X from UPGRADECOMMAND so salt-minion starts after upgrade 2022-01-28 15:49:53 -05:00
m0duspwnens
c45efebc7f Merge remote-tracking branch 'remotes/origin/dev' into soup_receiver 2022-01-28 15:27:27 -05:00
m0duspwnens
014696f62f fix receiver append to assigned_hostgroups.local.map.yaml 2022-01-28 15:26:37 -05:00
m0duspwnens
6b18551dd1 skip applying repo.client if airgap and saltupgrade prior to yum clean all 2022-01-28 14:39:10 -05:00
m0duspwnens
75b8d6a0c5 ensure /etc/yum.repos.d/securityonioncache.repo is absent if global:managerupdate = 0 2022-01-28 13:09:48 -05:00
weslambert
5142e6ccc7 Update so-kibana-config-load 2022-01-28 13:01:33 -05:00
Wes Lambert
3b76c2421c Update to allow for passing HL saved objects 2022-01-28 17:59:34 +00:00
m0duspwnens
e82c6a2393 default for managerupdate should be int not a string 2022-01-28 12:50:58 -05:00
m0duspwnens
905ca35e93 use sed instead of echo 2022-01-28 11:19:54 -05:00
m0duspwnens
3977146a16 add receiver to firewall files during soup 2022-01-28 10:36:30 -05:00
m0duspwnens
15c29bda74 dont apply wazuh state on sensors if it is disabled globally - https://github.com/Security-Onion-Solutions/securityonion/issues/7016 2022-01-28 09:31:02 -05:00
Josh Patterson
d0186c8c1b Merge pull request #7011 from Security-Onion-Solutions/fix/reinstall
https://github.com/Security-Onion-Solutions/securityonion/issues/7010
2022-01-27 16:40:37 -05:00
Jason Ertel
ac21bd1e29 Merge pull request #7009 from Security-Onion-Solutions/kilo
Add new abbreviated result limit param
2022-01-27 15:55:42 -05:00