Commit Graph

5932 Commits

Author SHA1 Message Date
William Wernert
ddcf5dec5b [refactor] Run all changes inside whiptail progress, use grep -q 2020-12-03 13:59:25 -05:00
Jason Ertel
967111decc Add node address to sensoroni pillar 2020-12-03 11:24:45 -05:00
Mike Reeves
94253e92a6 Adjust the elasticsearch config 2020-12-03 10:38:18 -05:00
William Wernert
f410c451cd [fix] kill -> stop, add indent to service check, revert incorrect logic 2020-12-03 10:31:45 -05:00
William Wernert
786665d8cf [fix] Correct logic for service check + bash trap 2020-12-03 10:18:44 -05:00
weslambert
c41d4373b7 Merge pull request #2192 from Security-Onion-Solutions/fix/elasticsearch_bool_query_clause_count
Add indices.query.bool.max_clause_count to allow for wildcard searche…
2020-12-03 09:30:24 -05:00
weslambert
95570976a8 Add indices.query.bool.max_clause_count to allow for wildcard searches targeting more than 1024 fields 2020-12-03 09:29:44 -05:00
weslambert
a84f816eff Merge pull request #2189 from Security-Onion-Solutions/feature/so-elastic-scripts
so-elastic scripts
2020-12-03 09:20:47 -05:00
Wes Lambert
4ce3ec7582 Make scripts executable 2020-12-03 14:18:22 +00:00
Wes Lambert
f96365baba Add intial grouped Elastic start/stop/restart scripts 2020-12-03 14:17:32 +00:00
William Wernert
9c919f3c92 [reafactor] systemctl stop -> kill 2020-12-02 17:07:49 -05:00
Jason Ertel
cf0ec2f78f Default to the node's primary IP for the description field 2020-12-02 16:38:33 -05:00
Mike Reeves
3e322c38eb Fix config for single cluster mode 2020-12-02 15:33:35 -05:00
William Wernert
46d2342c8b Merge branch 'bugfix/reinstall' into experimental 2020-12-02 14:45:46 -05:00
Mike Reeves
d004263b71 Add Elastic Clustering 2020-12-02 14:33:22 -05:00
William Wernert
fc7fe23590 [fix] Correct signal naming 2020-12-02 14:06:50 -05:00
William Wernert
cc5d54764a [fix] sed masks command return code, remove 2020-12-02 13:54:02 -05:00
William Wernert
8fe43d6d56 [fix] Print WARNING instead of ERROR if minion is not responding initially 2020-12-02 13:35:57 -05:00
Mike Reeves
69ae4577f5 Merge pull request #2174 from Security-Onion-Solutions/escluster
Escluster
2020-12-02 13:23:08 -05:00
William Wernert
467f9923b0 [refactor] Add trap to handle script exits, change what files are deleted in /etc/salt/ 2020-12-02 13:19:34 -05:00
weslambert
c819729cd6 Don't use max_files or time_to_live for shutdown params 2020-12-02 13:17:19 -05:00
Josh Patterson
54d8dcdbb0 Merge pull request #2173 from Security-Onion-Solutions/issue/2079
Issue/2079
2020-12-02 11:46:29 -05:00
William Wernert
2d4fe58299 [fix] Also kill currently running jobs 2020-12-01 21:43:38 -05:00
William Wernert
4b5b936abb [fix] echo -> return 2020-12-01 21:40:41 -05:00
William Wernert
2d6feea5c5 [fix] Syntax fixes 2020-12-01 21:21:32 -05:00
William Wernert
38028a543a [feat] Add timeout for salt services to stop during reinstall init 2020-12-01 21:18:24 -05:00
Jason Ertel
b7bc8db3b2 Modify PCAP quick action to work off of network community ID; Add new Correlate quick action 2020-12-01 17:37:44 -05:00
Jason Ertel
81b86bf7f2 Switch PCAP quick actions to support alternative lookup link when a single event ID is not available 2020-12-01 16:04:50 -05:00
m0duspwnens
ff6951cd95 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/2079 2020-12-01 15:38:15 -05:00
m0duspwnens
141d7a35c9 if true cluster enabled allow search nodes to talk to each other https://github.com/Security-Onion-Solutions/securityonion/issues/2079 2020-12-01 15:38:09 -05:00
William Wernert
c2e7e42509 [fix] Don't SIGKILL salt services + disable highstate schedule 2020-12-01 15:36:05 -05:00
weslambert
0e8f547087 Merge pull request #2160 from Security-Onion-Solutions/fix/strelka_mmbot
Remove ScanMmbot
2020-12-01 11:26:14 -05:00
weslambert
9517cb2a58 Remove ScanMmbot 2020-12-01 11:25:51 -05:00
Josh Brower
c303cdff09 Merge pull request #2150 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet Fixes - mysql race condition
2020-11-30 18:06:30 -05:00
Josh Brower
e7a927188b Fleet Fixes - mysql race condition 2020-11-30 17:28:11 -05:00
William Wernert
8a8885e14f [feat] Verify that main ip = mngmt ip
* Add a check to check whether the src ip in the routing table is also the ip assigned to the management nic
2020-11-30 16:53:02 -05:00
Josh Brower
8e9458ca84 Merge pull request #2149 from Security-Onion-Solutions/bugfix/fleet-standalone
Fix Fleet setup errors
2020-11-30 12:06:36 -05:00
Josh Brower
5d2acf4011 Fix Fleet setup errors 2020-11-30 12:06:02 -05:00
William Wernert
8964444eeb [fix] Correct count print in mysql_conn 2020-11-30 11:32:43 -05:00
William Wernert
ec81e8565f [fix] Add safety logic to retry var in mysql_conn 2020-11-30 11:32:28 -05:00
William Wernert
040b435278 [refactor] Fail mysql_conn if the mainint has > 1 ip address 2020-11-30 11:10:50 -05:00
Josh Brower
704f024441 Merge pull request #2146 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet standalone - fix event
2020-11-30 10:33:05 -05:00
Josh Brower
65d8005629 Fleet standalone - fix event 2020-11-30 10:32:39 -05:00
Josh Brower
7fddf99648 Merge pull request #2128 from Security-Onion-Solutions/bugfix/fleet-standalone
Fix Fleet setup errors
2020-11-27 13:59:19 -05:00
Josh Brower
f52c30bff5 Fix Fleet setup errors 2020-11-27 13:58:41 -05:00
Josh Brower
19a33c5c2a Merge pull request #2126 from Security-Onion-Solutions/bugfix/fleet-standalone
Bugfix/fleet standalone
2020-11-27 11:45:25 -05:00
Josh Brower
19b36f0468 Fleet standalone redirect fix 2020-11-27 11:43:51 -05:00
Josh Brower
95a664e12a Merge pull request #2103 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet standalone fix
2020-11-25 14:09:27 -05:00
Josh Brower
38afd67108 Fleet standalone fix 2020-11-25 14:08:30 -05:00
Jason Ertel
979f171828 Add missing comma to sensoroni.json 2020-11-25 12:29:45 -05:00