Commit Graph

79 Commits

Author SHA1 Message Date
m0duspwnens
b693373d8d change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679 2021-01-20 15:09:53 -05:00
m0duspwnens
df590bfd23 pillarize disk freespace for steno https://github.com/Security-Onion-Solutions/securityonion/issues/2095 2021-01-13 11:09:38 -05:00
m0duspwnens
2e278586f2 disable steno in so-status for import node 2020-12-16 13:03:24 -05:00
m0duspwnens
96b72d46be show steno,zeek,suricata as disabled in so-status on import node 2020-12-16 12:01:48 -05:00
m0duspwnens
65334d15ea https://github.com/Security-Onion-Solutions/securityonion/issues/2040 2020-11-24 09:33:38 -05:00
m0duspwnens
5a95159ec3 just use so-status.conf for containers to fix salt warning https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-11 11:38:48 -05:00
m0duspwnens
1fca5e65df redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681 2020-11-10 15:31:47 -05:00
William Wernert
3ee9f23d26 [fix] Use url_base in sensoroni.json instead of manager hostname 2020-10-28 12:28:34 -04:00
m0duspwnens
0b6b6e38fc fix map for steno 2020-10-22 11:24:18 -04:00
m0duspwnens
aa59eff1ac fix if statement 2020-10-22 10:59:03 -04:00
m0duspwnens
172ca9aa8d add option to enable or disable to steno docker container - https://github.com/Security-Onion-Solutions/securityonion/issues/1601 2020-10-22 10:52:34 -04:00
m0duspwnens
09cc8ae1fb fail the state if it isnt in top 2020-09-09 16:48:50 -04:00
m0duspwnens
a229ae82ce only allow state to run if it is in top for the node 2020-09-02 16:15:52 -04:00
Jason Ertel
ff5d1cd815 Expand nginx body size limit to 2.5GB to handle 2G PCAPs from sensors 2020-09-01 10:07:28 -04:00
m0duspwnens
35027e32b3 dont constantly run steno or suricata containers for import node 2020-08-14 14:43:37 -04:00
Mike Reeves
24ed92c9dc minio and change to global 2020-08-04 15:54:03 -04:00
Jason Ertel
ec09c064d0 If SENSOR_CHECKIN_INTERVAL_MS is still not set when using in a template, fallback to 10s 2020-07-23 21:19:45 -04:00
Jason Ertel
cb46ca4832 Ensure distributed installations have the check-in interval correctly set 2020-07-22 14:26:55 -04:00
Jason Ertel
0a976861f3 Dynamically set sensor checkin interval; allow overrides if var is preset 2020-07-15 13:22:14 -04:00
Jason Ertel
d75d64c8ed Mount imported pcap dirs into sensoroni container for imported PCAP pivots 2020-07-13 21:03:47 -04:00
Jason Ertel
8f66a27f07 Refactor image repository to a single variable 2020-07-13 18:26:43 -04:00
m0duspwnens
1f48dc765e merge with dev and resolv conflicts 2020-07-10 10:36:48 -04:00
m0duspwnens
9c2dcd2318 fix reference to master grain 2020-07-09 17:06:44 -04:00
Jason Ertel
33179141a1 Enable PCAP pivots from imports 2020-07-09 16:11:38 -04:00
m0duspwnens
5ca3ecf4bd fix reference to master grain 2020-07-09 15:42:39 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Jason Ertel
d7693f9b55 Expose pcap dir to sensoroni for epoch discovery 2020-06-22 08:27:43 -04:00
Jason Ertel
1ee3625f61 Ensure certs dir is group readable by socore since Sensoroni process will need to read the client key 2020-06-21 15:46:36 -04:00
Jason Ertel
81ed656ba0 Bind both steno and sensoroni processes to host network 2020-06-21 10:50:10 -04:00
Jason Ertel
76e3118bd3 Split Sensoroni and Stenographer executables into separate images 2020-06-21 08:33:09 -04:00
m0duspwnens
766b56a944 update dockers to 1.2.2 2020-04-23 10:11:26 -04:00
Mike Reeves
d9e27a5444 Update Versions 2020-04-15 15:37:59 -04:00
Jason Ertel
7529144635 secure config files 2020-04-10 17:27:50 -04:00
Jason Ertel
ebcae86c0b Correct log directory for sensoroni agent 2020-04-02 09:06:37 -04:00
Josh Brower
f9e07709f2 bpf fix 2020-02-18 16:36:20 -05:00
Josh Brower
86689edf24 Merge branch 'dev' into feature/bpf-steno 2020-01-28 18:18:17 -05:00
Josh Brower
ae087c5552 Steno BPF tweaks 2020-01-28 16:53:19 -05:00
Mike Reeves
de369494ed Merge pull request #252 from Security-Onion-Solutions/feature/bpf-steno
Steno BPF - cleanup & simplify
2020-01-28 10:18:23 -05:00
Wes Lambert
b995b09d52 Update version in all state files 2020-01-28 14:59:53 +00:00
Josh Brower
7875436efd Steno BPF - cleanup & simplify 2020-01-25 11:27:10 -05:00
Josh Brower
3262854f4e Steno - fix error name 2020-01-24 04:30:06 -05:00
Josh Brower
7dd30ef07e Steno - fix disk percentage 2020-01-24 04:22:47 -05:00
Josh Brower
78527ab87c Steno - BPF Config 2020-01-24 04:20:49 -05:00
Wes Lambert
0b45d6f638 increase free disk percentage 2020-01-20 14:08:02 +00:00
Mike Reeves
ae55b59048 Switch to using images in registry 2020-01-14 10:11:26 -05:00
Mike Reeves
f3c204c790 Disable Beats input - Update sensoroni version 2019-11-06 13:37:42 -05:00
Mike Reeves
ca4cd782a1 Docker URL Fix - Issue #68 2019-10-16 10:39:18 -04:00
Mike Reeves
063f9012d1 PCAP Module - Fix sensoroni logging 2019-09-25 16:21:02 -04:00
Mike Reeves
5e2cc08039 PCAP Module - Update steno image 2019-09-24 14:05:20 -04:00
Mike Reeves
b6fd6fa2cc PCAP module - fix dir 2019-06-19 22:10:09 -04:00