Doug Burks
|
b84d997f87
|
Update so_motd.jinja
|
2023-06-15 09:54:23 -04:00 |
|
weslambert
|
03082339ca
|
Merge pull request #10592 from Security-Onion-Solutions/fix/analyzer_dependencies
Update analyzer dependencies
|
2023-06-14 12:22:06 -04:00 |
|
Josh Brower
|
fa57494694
|
Merge pull request #10584 from Security-Onion-Solutions/2.4/elasticagent-renaming
Change Elastic Fleet Tarball naming
|
2023-06-14 09:42:57 -04:00 |
|
weslambert
|
3f1741e75a
|
Merge pull request #10585 from Security-Onion-Solutions/fix/elasticsearch_templates
Update Elasticsearch templates for Fleet
|
2023-06-14 09:33:23 -04:00 |
|
Wes
|
48331ce35b
|
Add system.system component templates
|
2023-06-14 13:29:11 +00:00 |
|
Wes
|
c2ac60b82e
|
Add system.system template and add event-mappings
|
2023-06-14 13:28:00 +00:00 |
|
Josh Brower
|
fedfbe9fec
|
Fix tarball output name
|
2023-06-14 08:52:56 -04:00 |
|
Josh Brower
|
9947f9def4
|
Rework tarball naming schema
|
2023-06-14 07:38:03 -04:00 |
|
Wes
|
c205438771
|
Update dependencies
|
2023-06-14 02:35:29 +00:00 |
|
Wes
|
8cde05807c
|
Remove elastic-agent dir
|
2023-06-13 21:33:04 +00:00 |
|
Wes
|
2ac0aba916
|
Add osquery files
|
2023-06-13 21:32:02 +00:00 |
|
Wes
|
af003cc2a1
|
Add osquery templates
|
2023-06-13 20:43:39 +00:00 |
|
Josh Brower
|
0d4f6b4fe6
|
Change Elastic Fleet Tarball naming
|
2023-06-13 16:32:19 -04:00 |
|
Jason Ertel
|
7093254439
|
Merge pull request #10582 from Security-Onion-Solutions/jertel/pcap
ensure status line shows dates for new and existing imports
|
2023-06-13 15:16:43 -04:00 |
|
Wes
|
bd7644a557
|
Add another template
|
2023-06-13 19:13:20 +00:00 |
|
Jason Ertel
|
90b740a997
|
ensure status line shows dates for new and existing imports
|
2023-06-13 15:11:13 -04:00 |
|
Wes
|
5547a1b7ab
|
Add event mappings
|
2023-06-13 18:23:50 +00:00 |
|
Wes
|
1b90fd8581
|
Add custom component templates
|
2023-06-13 18:21:45 +00:00 |
|
Doug Burks
|
bbdf7bb5a7
|
Merge pull request #10580 from Security-Onion-Solutions/dougburks-patch-1
Set START and END variables earlier in so-import-pcap
|
2023-06-13 13:31:16 -04:00 |
|
Doug Burks
|
fb8ad71b27
|
Set START and END variables earlier in so-import-pcap
|
2023-06-13 13:19:18 -04:00 |
|
Wes
|
e43b7607bb
|
Add more component templates
|
2023-06-13 17:04:03 +00:00 |
|
Wes
|
a265c06e31
|
Add other component templates
|
2023-06-13 15:47:25 +00:00 |
|
Wes
|
2aa954cb0a
|
Add component templates
|
2023-06-13 15:25:23 +00:00 |
|
Wes
|
73812b11a3
|
Allow ingest node pipelines that start with a period
|
2023-06-13 13:37:56 +00:00 |
|
Wes
|
38ab426470
|
Add final Fleet pipeline
|
2023-06-13 13:36:26 +00:00 |
|
Wes
|
d0a6881c2c
|
Add event mappings and remove meta information for now
|
2023-06-13 13:35:46 +00:00 |
|
Wes
|
57268ba934
|
Change priority of templates
|
2023-06-12 14:29:45 +00:00 |
|
Wes
|
1208915896
|
Remove Elastic Agent package templates
|
2023-06-12 14:24:59 +00:00 |
|
Wes
|
42f5ad9939
|
Add templates for system.auth and systen.syslog
|
2023-06-12 14:23:24 +00:00 |
|
Doug Burks
|
8e0d895afb
|
Merge pull request #10572 from Security-Onion-Solutions/dougburks-patch-1
FIX: Add more Zeek logs to excluded list #10569
|
2023-06-12 09:33:13 -04:00 |
|
Doug Burks
|
998c85e3f8
|
Update defaults.yaml
|
2023-06-12 09:31:19 -04:00 |
|
weslambert
|
32f3ee0b01
|
Merge pull request #10564 from Security-Onion-Solutions/fix/elasticsearch_templates
Update templates for integrations
|
2023-06-12 09:05:31 -04:00 |
|
Doug Burks
|
a90aed25fb
|
Merge pull request #10570 from Security-Onion-Solutions/dougburks-patch-1
FIX: Add Zeek ocsp.log to excluded list #10569
|
2023-06-12 08:46:49 -04:00 |
|
Doug Burks
|
ae14e4870d
|
Add ocsp to logging.zeek.exclued in defaults.yaml
|
2023-06-12 08:44:46 -04:00 |
|
Doug Burks
|
273a1d7e9c
|
Merge pull request #10568 from Security-Onion-Solutions/2.4/fix-suricata-dhcp
FIX: Suricata DHCP logs not ingesting #10565
|
2023-06-12 07:50:44 -04:00 |
|
Doug Burks
|
b3f8ed7dcd
|
FIX: Suricata DHCP logs not ingesting #10565
|
2023-06-10 11:42:41 -04:00 |
|
Wes
|
ad5a424c03
|
Update templates for integrations
|
2023-06-09 18:32:50 +00:00 |
|
Jason Ertel
|
e06787445c
|
Merge pull request #10561 from Security-Onion-Solutions/jertel/pcap
Node description config setting should not accept a grid-wide value
|
2023-06-09 12:02:51 -04:00 |
|
Jason Ertel
|
8a4f5d6dcb
|
Merge branch '2.4/dev' into jertel/pcap
|
2023-06-09 11:51:37 -04:00 |
|
Doug Burks
|
81dd951064
|
Merge pull request #10560 from Security-Onion-Solutions/dougburks-patch-1
FIX: Setup re-runs when SSH'ing into a successfully installed minion …
|
2023-06-09 11:49:54 -04:00 |
|
Doug Burks
|
c12f138899
|
FIX: Setup re-runs when SSH'ing into a successfully installed minion node #10498
|
2023-06-09 11:20:54 -04:00 |
|
Jason Ertel
|
884a7041af
|
Merge branch '2.4/dev' into jertel/pcap
|
2023-06-09 10:47:26 -04:00 |
|
Jason Ertel
|
023008c54c
|
do not allow node_description to be set at global grid-wide level
|
2023-06-09 10:46:56 -04:00 |
|
Jason Ertel
|
6f7de954d9
|
Merge pull request #10559 from Security-Onion-Solutions/jertel/pcap
Telegraf should monitor all mount points
|
2023-06-09 09:18:54 -04:00 |
|
Jason Ertel
|
46371aaaf5
|
Monitor all mount points for simplicity
|
2023-06-09 09:14:36 -04:00 |
|
Doug Burks
|
1fde2e2755
|
Merge pull request #10553 from Security-Onion-Solutions/2.4/update-readme
2.4/update readme
|
2023-06-08 13:44:39 -04:00 |
|
Doug Burks
|
1aad9d1b2f
|
Update README.md
|
2023-06-08 13:41:08 -04:00 |
|
Doug Burks
|
9703e70163
|
Update README.md
|
2023-06-08 13:38:11 -04:00 |
|
Doug Burks
|
f6735207d7
|
Merge pull request #10552 from Security-Onion-Solutions/2.4/fix-suricata-dataset
FIX: Suricata dataset values for certain types of metadata#10551
|
2023-06-08 13:33:53 -04:00 |
|
Doug Burks
|
e5f76a9c6e
|
change suricata parsers from dataset to event.dataset
|
2023-06-08 12:31:31 -04:00 |
|