Jason Ertel
|
bc969c1ca2
|
Merge pull request #14302 from Security-Onion-Solutions/jertel/wip
more false positives
|
2025-02-27 08:00:49 -05:00 |
|
Jason Ertel
|
772aa7379f
|
more false positives
|
2025-02-27 07:55:22 -05:00 |
|
reyesj2
|
80fed1e045
|
default capinfos to use start/end time arg
|
2025-02-25 21:47:56 -06:00 |
|
Jason Ertel
|
a94d657251
|
Merge pull request #14296 from Security-Onion-Solutions/jertel/wip
annotation/config updates
|
2025-02-25 17:04:13 -05:00 |
|
Jason Ertel
|
9dafa062f8
|
annotation/config updates
|
2025-02-25 17:00:41 -05:00 |
|
reyesj2
|
17edc06987
|
allow installing integrations that require an elastic license
|
2025-02-24 14:45:43 -06:00 |
|
reyesj2
|
e2772e899e
|
component template missing metadata field
|
2025-02-24 10:24:11 -06:00 |
|
reyesj2
|
d7c06e5ff4
|
run elasticsearch state, right before completing soup to ensure templates for optional integrations are loaded
|
2025-02-24 09:02:56 -06:00 |
|
reyesj2
|
3f2b0973af
|
manually create unused logs-soc@package for successful elasticsearch templates load
|
2025-02-24 08:59:59 -06:00 |
|
Josh Brower
|
6d0350793d
|
Remove old defend json
|
2025-02-23 14:02:17 -05:00 |
|
Jason Ertel
|
7155ccaf96
|
ensure override for nmcli exists in /etc
|
2025-02-21 17:10:39 -05:00 |
|
reyesj2
|
c1282e77a0
|
move removal of eaintegrations.txt to up_to_2.4.130
|
2025-02-21 14:02:22 -06:00 |
|
Josh Brower
|
22f3865602
|
Dont upgrade integrations during pre-phase
|
2025-02-21 09:32:36 -05:00 |
|
Jason Ertel
|
f51d255c98
|
Merge pull request #14274 from Security-Onion-Solutions/jertel/wip
Ignore more acceptable test error logs
|
2025-02-21 08:40:56 -05:00 |
|
Jason Ertel
|
66a2ec7e21
|
ES upgrade errors to ignore
|
2025-02-21 08:38:40 -05:00 |
|
Jorge Reyes
|
fc12b1f09b
|
Merge pull request #14272 from Security-Onion-Solutions/reyesj2-patch-1
ES 8.17.2 pipeline version updates
|
2025-02-20 17:32:20 -06:00 |
|
reyesj2
|
69b559fb26
|
ES 8.17.2 pipeline version updates
|
2025-02-20 17:11:28 -06:00 |
|
Jorge Reyes
|
637ed59567
|
Merge pull request #14271 from Security-Onion-Solutions/reyesj2-patch-1
add back settings previously defined when overwritting logs-elastic_a…
|
2025-02-20 15:26:12 -06:00 |
|
reyesj2
|
df350b5a56
|
ES 8.17.2
|
2025-02-20 14:20:09 -06:00 |
|
reyesj2
|
3b6344e7f0
|
add back settings previously defined when overwritting logs-elastic_agent@package and logs-endpoint.diagnostics.collection@package
|
2025-02-20 12:42:30 -06:00 |
|
Jorge Reyes
|
145648431f
|
Merge pull request #14267 from Security-Onion-Solutions/reyesj2-patch-1
set metrics indices to 0 replicas
|
2025-02-20 10:13:29 -06:00 |
|
reyesj2
|
c9b41e2eb1
|
formatting
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-02-20 10:11:34 -06:00 |
|
reyesj2
|
499d473b9d
|
set metrics indices to 0 replicas
|
2025-02-20 10:06:59 -06:00 |
|
Josh Brower
|
41147ae7f3
|
Merge pull request #14265 from Security-Onion-Solutions/2.4/elasticfix
Update Elastic Defend JSON
|
2025-02-19 16:22:28 -05:00 |
|
Josh Brower
|
c6d72d31cb
|
Update Elastic Defend JSON
|
2025-02-19 16:16:38 -05:00 |
|
reyesj2
|
64f6a2d81e
|
re-enable security (siem) in default kibana space
|
2025-02-19 10:38:37 -06:00 |
|
reyesj2
|
45c66b93d7
|
make sure only a non-empty file is loaded
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-02-19 09:23:48 -06:00 |
|
Jorge Reyes
|
a3dba9b566
|
Merge pull request #14255 from Security-Onion-Solutions/foxtrot
ES 8.17.1
|
2025-02-18 14:58:46 -06:00 |
|
Jason Ertel
|
23ab8983f7
|
Revert "Support CLI changing of a user's password without disabling existing auth settings for that user"
This reverts commit b25b6f7bf2.
|
2025-02-18 12:41:41 -05:00 |
|
Jason Ertel
|
b25b6f7bf2
|
Support CLI changing of a user's password without disabling existing auth settings for that user
|
2025-02-18 12:37:25 -05:00 |
|
Jason Ertel
|
19593cd771
|
use consistent ciphers across listeners
|
2025-02-18 12:17:50 -05:00 |
|
reyesj2
|
1be8de7acb
|
must use null check
|
2025-02-18 11:16:57 -06:00 |
|
Jason Ertel
|
7dd64380cc
|
Enable TLSv1.3 and use consistent ciphers across listeners
|
2025-02-18 11:48:00 -05:00 |
|
reyesj2
|
21ed1439e2
|
update udp integration policy
|
2025-02-18 10:40:18 -06:00 |
|
reyesj2
|
c1c72ddd9b
|
update global@custom pipeline ignore null/empty string values
|
2025-02-18 10:39:54 -06:00 |
|
reyesj2
|
235a8e3934
|
update index templates for endpoint integration
|
2025-02-17 18:30:51 -06:00 |
|
reyesj2
|
3530bff320
|
always update package components state file to ensure index templates are created with any available integration components
|
2025-02-17 12:29:27 -06:00 |
|
reyesj2
|
12f0195f29
|
pfsense integration - keep suricata events
|
2025-02-17 12:28:23 -06:00 |
|
reyesj2
|
85dcfbf368
|
update kibana default space
|
2025-02-17 12:27:36 -06:00 |
|
reyesj2
|
8568c372f6
|
disable fleet apm
|
2025-02-17 12:21:31 -06:00 |
|
reyesj2
|
03b76cbcf5
|
remove state files
|
2025-02-13 08:51:50 -06:00 |
|
reyesj2
|
c711ffe6c5
|
keep pipeline "managed" metadata
|
2025-02-13 08:44:56 -06:00 |
|
reyesj2
|
09c7b31918
|
update pfsense pipeline version. Remove unused component templates
|
2025-02-12 16:33:56 -06:00 |
|
reyesj2
|
40cb3a53ae
|
Revert ES 8.17.2 upgrade -> 8.17.1
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-02-12 13:18:08 -06:00 |
|
reyesj2
|
fb0cd436d3
|
ES 8.17.2 TODO: Check import-evtx-logs.json for updated pipeline versions
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-02-11 11:23:04 -06:00 |
|
reyesj2
|
33f145a40b
|
ensure network packet capture integration data has event.module:network_traffic
|
2025-02-10 13:16:39 -06:00 |
|
reyesj2
|
3b69ff9fc9
|
integration policy update
|
2025-02-10 13:16:25 -06:00 |
|
reyesj2
|
9bde70a8e2
|
zeek.software typo
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-02-07 15:19:40 -06:00 |
|
reyesj2
|
dd17ee7665
|
fix defining custom logstash pipelines when kafka is enabled
|
2025-02-06 22:19:24 -06:00 |
|
Jason Ertel
|
4b51066327
|
Merge pull request #14191 from Security-Onion-Solutions/jertel/wip
ca download; ignore shard errors on startup; clarify oidc id
|
2025-02-05 15:09:57 -05:00 |
|