Commit Graph

8723 Commits

Author SHA1 Message Date
Mike Reeves 8a5960c220 Merge pull request #5896 from Security-Onion-Solutions/kilo 2021-10-14 18:05:33 -04:00
Jason Ertel 9797a15218 Fix issue with 'so-user delete' resetting all user roles - note that this function is not technically supported or published since it's not intended for production use 2021-10-14 17:23:18 -04:00
William Wernert c7b15a9b1f Replace rather than append to Kibana misc log 2021-10-14 15:13:55 -04:00
William Wernert cba97802fe Fix indent 2021-10-14 15:13:34 -04:00
William Wernert 025256aeaf Merge pull request #5890 from Security-Onion-Solutions/foxtrot
Misc setup changes
2021-10-14 14:55:24 -04:00
weslambert 490f7eaf81 Merge pull request #5886 from Security-Onion-Solutions/feature/eg_pivot
Add EG pivot
2021-10-14 14:49:38 -04:00
m0duspwnens 6a2bf11a75 change format of file 2021-10-14 13:43:39 -04:00
m0duspwnens 78d30285b1 seperate securitySolutions load 2021-10-14 13:24:51 -04:00
Wes Lambert f1fafa015e Add EG to list of groups to include 127.0.0.1 2021-10-14 16:27:28 +00:00
Wes Lambert 6cdc214582 Add pillar in setup and change name of EG variable 2021-10-14 15:33:37 +00:00
Wes Lambert 15049f44b9 Add EG pivot 2021-10-14 15:15:23 +00:00
Doug Burks 42a642b85c Merge pull request #5873 from petiepooo/enh-rediscount-tty
featreq: remove tty flag in redis-count script
2021-10-14 10:07:07 -04:00
weslambert 3b45e68ead Merge pull request #5885 from Security-Onion-Solutions/feature/jinjafy_soc_actions
Allow SOC actions to use Jinja
2021-10-14 10:03:12 -04:00
Wes Lambert 5ee0ea3fe7 Allow SOC actions to use Jinja 2021-10-14 13:59:55 +00:00
weslambert 55c60f485c Merge pull request #5884 from Security-Onion-Solutions/feature/hl_eg
Add EG firewall allowance via setup
2021-10-14 09:55:07 -04:00
Wes Lambert 78e88e0765 Add EG firewall allowance via setup 2021-10-13 21:42:54 +00:00
Wes Lambert a9b250c0f4 Add EG firewall config 2021-10-13 21:37:59 +00:00
m0duspwnens ae9753326a fix var, quote vars 2021-10-13 16:38:01 -04:00
m0duspwnens c8fb504ee0 Revert "Merge remote-tracking branch 'remotes/origin/dev' into issue/3933"
This reverts commit 54eec92621, reversing
changes made to 7832e59629.
2021-10-13 15:22:46 -04:00
m0duspwnens 54eec92621 Merge remote-tracking branch 'remotes/origin/dev' into issue/3933 2021-10-13 15:19:33 -04:00
m0duspwnens 7832e59629 only load default kibana saved_objects during setup 2021-10-13 15:19:20 -04:00
weslambert f9001654bb Merge pull request #5871 from Security-Onion-Solutions/feature/hl_eg
Initial EG stuff
2021-10-13 15:07:03 -04:00
Wes Lambert 2a504a061b Add Curator action files for EG indices 2021-10-13 18:40:34 +00:00
m0duspwnens bb9c6446e4 Merge remote-tracking branch 'remotes/origin/dev' into issue/3933 2021-10-13 14:01:36 -04:00
Pete e7581036f7 remove tty/interactive flags
This call to docker exec simply returns a number.  No interaction (stdin) or tty is required.  Specifically, having the -t option prevents running via salt using a command such as:

> salt '*' cmd.run 'so-redis-count'
2021-10-13 13:51:05 -04:00
Wes Lambert e1629d7ec4 Initial EG stuff 2021-10-13 17:13:07 +00:00
Josh Patterson b4873bd296 Merge pull request #5868 from Security-Onion-Solutions/issue/5818
Issue/5818
2021-10-13 12:52:48 -04:00
m0duspwnens 3044edb104 update comment 2021-10-13 12:38:58 -04:00
m0duspwnens a495779552 only 3 attempts with 120s max attemps 2021-10-13 12:34:56 -04:00
m0duspwnens 880c1b97b0 remove $ from var 2021-10-13 12:25:11 -04:00
m0duspwnens 7a4fa8879c change count, attempts and timeout 2021-10-13 12:13:24 -04:00
m0duspwnens adb8292814 add missing ) 2021-10-13 10:37:18 -04:00
m0duspwnens 6e7a5fa326 add timeouts to check_salt_minion_status and check_salt_master_status - https://github.com/Security-Onion-Solutions/securityonion/issues/5818 2021-10-13 09:45:15 -04:00
m0duspwnens 23ea53248d single line format 2021-10-12 14:15:37 -04:00
m0duspwnens f1a5991699 add securitySolution.defaultIndex to defaults 2021-10-12 12:35:13 -04:00
m0duspwnens c69ad091f7 update saved_objects config 2021-10-12 12:02:30 -04:00
William Wernert b97361fab9 Remove references to xenial in setup
Resolves #4292
2021-10-12 10:23:39 -04:00
William Wernert 36e1795295 Add end of setup log messages per #5032 2021-10-12 10:19:47 -04:00
m0duspwnens 498e385484 change name to SAVED_OBJECTS 2021-10-12 10:15:39 -04:00
William Wernert af687b0706 Remove all holds on Ubuntu reinstall 2021-10-12 10:10:34 -04:00
m0duspwnens 19489f3626 Merge remote-tracking branch 'remotes/origin/dev' into issue/3933 2021-10-12 10:07:40 -04:00
m0duspwnens 89d1df8a1d change name to SAVED_OBJECTS 2021-10-12 10:07:26 -04:00
William Wernert 946cf81a27 If ANALYST is selected immediately quit setup 2021-10-12 09:48:38 -04:00
Mike Reeves 2561480371 Merge pull request #5850 from Security-Onion-Solutions/kilo
Upgrade to Kratos 0.7.6-alpha.1
2021-10-12 08:19:25 -04:00
Jason Ertel d21dee162d Add Note field to user traits; Enforce max length restrictions on email, firstname, lastname, and note fields 2021-10-08 12:39:17 -04:00
Mike Reeves 444d067112 Merge pull request #5813 from Security-Onion-Solutions/macleod
Highlander changes
2021-10-08 10:06:18 -04:00
Mike Reeves 2a82373051 highlander fixes 2021-10-08 09:32:13 -04:00
Mike Reeves 64758a534c Set ml to true 2021-10-08 08:42:26 -04:00
m0duspwnens 7517a63008 disabled ml 2021-10-07 13:06:52 -04:00
m0duspwnens b2facdf31c add securitySolutions advanced setting 2021-10-07 12:57:28 -04:00