Jason Ertel
564d8c2868
Merge branch '2.4/dev' into jertel/wip
2025-02-18 11:50:21 -05:00
Doug Burks
8033cdbc89
Merge pull request #14253 from Security-Onion-Solutions/dougburks-patch-1
...
FIX: Add TLSv1.3 to nginx config #14252
2025-02-18 11:49:22 -05:00
Jason Ertel
7dd64380cc
Enable TLSv1.3 and use consistent ciphers across listeners
2025-02-18 11:48:00 -05:00
Doug Burks
5c3e28535a
FIX: Add TLSv1.3 to nginx config #14252
2025-02-18 11:46:45 -05:00
reyesj2
21ed1439e2
update udp integration policy
2025-02-18 10:40:18 -06:00
reyesj2
c1c72ddd9b
update global@custom pipeline ignore null/empty string values
2025-02-18 10:39:54 -06:00
reyesj2
235a8e3934
update index templates for endpoint integration
2025-02-17 18:30:51 -06:00
reyesj2
3530bff320
always update package components state file to ensure index templates are created with any available integration components
2025-02-17 12:29:27 -06:00
reyesj2
12f0195f29
pfsense integration - keep suricata events
2025-02-17 12:28:23 -06:00
reyesj2
85dcfbf368
update kibana default space
2025-02-17 12:27:36 -06:00
reyesj2
8568c372f6
disable fleet apm
2025-02-17 12:21:31 -06:00
Jorge Reyes
810abba83e
Merge pull request #14229 from Security-Onion-Solutions/reyesj2/rel
...
force es pipeline sync
2025-02-13 08:54:06 -06:00
reyesj2
03b76cbcf5
remove state files
2025-02-13 08:51:50 -06:00
reyesj2
c711ffe6c5
keep pipeline "managed" metadata
2025-02-13 08:44:56 -06:00
Jorge Reyes
8094bf9c7c
Merge pull request #14225 from Security-Onion-Solutions/reyesj2/rel
...
update pfsense pipeline version. Remove unused component templates
2025-02-12 16:37:25 -06:00
reyesj2
09c7b31918
update pfsense pipeline version. Remove unused component templates
2025-02-12 16:33:56 -06:00
Jorge Reyes
d1e98d0849
Merge pull request #14224 from Security-Onion-Solutions/reyesj2/rel
...
Revert ES 8.17.2 upgrade -> 8.17.1
2025-02-12 13:18:39 -06:00
reyesj2
40cb3a53ae
Revert ES 8.17.2 upgrade -> 8.17.1
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-02-12 13:18:08 -06:00
Mike Reeves
e9e7434c69
Merge pull request #14222 from Security-Onion-Solutions/TOoSmOotH-patch-2
...
Update 2-4.yml
2025-02-12 11:30:38 -05:00
Mike Reeves
d2ac6ec10f
Update 2-4.yml
2025-02-12 11:29:07 -05:00
Mike Reeves
4f19884c8d
Merge pull request #14221 from Security-Onion-Solutions/TOoSmOotH-patch-1
...
Update VERSION
2025-02-12 11:28:11 -05:00
Mike Reeves
16c332ad2e
Update VERSION
2025-02-12 11:27:43 -05:00
Mike Reeves
d430dd2b73
Merge pull request #14219 from Security-Onion-Solutions/2.4/dev
...
2.4.120
2025-02-12 11:14:56 -05:00
Mike Reeves
43a0020a9e
Merge pull request #14220 from Security-Onion-Solutions/fixeroni
...
Merge Conflict Fix
2025-02-12 09:37:04 -05:00
Mike Reeves
b0e82cd59b
Fix Conflict
2025-02-12 09:35:52 -05:00
Mike Reeves
237370f0c7
Merge pull request #14218 from Security-Onion-Solutions/2.4.120
...
2.4.120
2025-02-12 09:20:40 -05:00
Mike Reeves
69be367acf
2.4.120
2025-02-12 09:09:38 -05:00
Jorge Reyes
cdf8943f24
Merge pull request #14214 from Security-Onion-Solutions/reyesj2/rel
...
ES 8.17.2
2025-02-11 11:24:18 -06:00
reyesj2
fb0cd436d3
ES 8.17.2 TODO: Check import-evtx-logs.json for updated pipeline versions
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-02-11 11:23:04 -06:00
reyesj2
33f145a40b
ensure network packet capture integration data has event.module:network_traffic
2025-02-10 13:16:39 -06:00
reyesj2
3b69ff9fc9
integration policy update
2025-02-10 13:16:25 -06:00
Jorge Reyes
66bc0d487c
Merge pull request #14206 from Security-Onion-Solutions/reyesj2-patch-00
...
zeek.software typo
2025-02-07 15:27:52 -06:00
reyesj2
9bde70a8e2
zeek.software typo
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2025-02-07 15:19:40 -06:00
Jorge Reyes
322941f29a
Merge pull request #14203 from Security-Onion-Solutions/reyesj2-patch-00
...
fix defining custom logstash pipelines when kafka is enabled
2025-02-07 07:52:11 -06:00
reyesj2
dd17ee7665
fix defining custom logstash pipelines when kafka is enabled
2025-02-06 22:19:24 -06:00
Jason Ertel
4b51066327
Merge pull request #14191 from Security-Onion-Solutions/jertel/wip
...
ca download; ignore shard errors on startup; clarify oidc id
2025-02-05 15:09:57 -05:00
Jason Ertel
bf19c6e730
ca download; ignore shard errors on startup; clarify oidc id
2025-02-05 15:04:04 -05:00
Josh Brower
12a2b491c3
Merge pull request #14190 from Security-Onion-Solutions/2.4/fixmsi
...
Refresh Agent installers
2025-02-05 10:22:17 -05:00
Joshua Brower
4636a8d9b1
Refresh Agent installers
2025-02-05 09:38:33 -05:00
Josh Brower
abbb0db1ff
Merge pull request #14189 from Security-Onion-Solutions/2.4/fixmsi
...
Rework for MSI
2025-02-05 09:35:37 -05:00
Joshua Brower
95fe212202
Rework for MSI
2025-02-05 09:29:45 -05:00
coreyogburn
fbb9bf14e9
Merge pull request #14183 from Security-Onion-Solutions/cogburn/escalate-limit
...
New Limit on Bulk Creating Related Events
2025-02-04 15:24:53 -07:00
Corey Ogburn
23ebe966e0
Added Large Values Warning
...
maxBulkEscalateEvents now has a warning that large values may run into other limits.
2025-02-04 10:33:04 -07:00
Corey Ogburn
d0fa6eaf83
New Limit on Bulk Creating Related Events
...
Used by the UI and API to hint at a user that not every event will be attached to a case. Supports values up to 10,000 (the default limit on the number of documents returned by a single ES search).
2025-02-03 14:20:33 -07:00
Josh Brower
7a0309cdf4
Merge pull request #14179 from Security-Onion-Solutions/2.4/fixilmpolicy
...
Fix ip-mappings ILM
2025-02-03 09:35:55 -05:00
Joshua Brower
b874619f0d
Fix ip-mappings ILM
2025-02-03 09:31:08 -05:00
Jason Ertel
028c73fd3a
Merge pull request #14162 from Security-Onion-Solutions/TOoSmOotH-patch-2
...
Update so-functions
2025-01-29 10:12:20 -05:00
Mike Reeves
27e9773782
Update so-functions
2025-01-29 10:07:52 -05:00
Josh Patterson
7ae128dec6
Merge pull request #14161 from Security-Onion-Solutions/esdtsn
...
env discovery.type single-node change
2025-01-29 09:29:04 -05:00
Josh Patterson
fe4129c8e0
env discovery.type single-node change
...
only managers and heavynodes are eligible for discovery.type=single-node
2025-01-29 09:11:52 -05:00
