Mike Reeves
be35b59b8c
Update echo messages for PCAP engine clarity
2026-02-24 10:04:26 -05:00
Mike Reeves
7170289a5e
Continue upgrade after pcapengine is changed to SURICATA
...
Instead of exiting and requiring the user to rerun the script after
changing pcapengine to SURICATA, let the script continue to the
version check and upgrade.
2026-02-23 11:35:32 -05:00
Mike Reeves
ca040044bb
Use so-yaml to update pcapengine pillar and fix file path
...
Replace fragile sed with so-yaml.py replace for proper YAML handling.
Also correct the pillar file path from soc_soc.sls to soc_global.sls.
2026-02-23 11:16:30 -05:00
Mike Reeves
f17e2961ed
Add PCAP orphan warning and require SURICATA before upgrade
...
- Warn users that undeleted Stenographer PCAP data will be inaccessible
and never automatically cleaned up if they switch to SURICATA without
deleting it first
- Require pcapengine to be set to SURICATA before allowing upgrade,
with clear messaging when the user declines to change it
2026-02-23 11:05:30 -05:00
Mike Reeves
bbc7668786
Add version check, PCAP cleanup prompts, and SOC config references to soupto3
...
- Skip upgrade if already running Security Onion 3.x.x
- Add interactive prompts to delete Stenographer PCAP data (with double confirmation) and change pcapengine to SURICATA
- Direct users to SOC Configuration UI instead of editing pillar files directly
- Consolidate TRANSITION and STENO cases to reduce repeated code
2026-02-23 10:49:54 -05:00
Mike Reeves
1888f9e757
Soup to 3
2026-02-23 10:07:16 -05:00
reyesj2
057131dce7
disable redis on heavynodes -- no longer in use
2026-01-27 16:39:07 -06:00
reyesj2
b4c8f7924a
missing updates to variables
2026-01-22 16:49:20 -06:00
reyesj2
8e3ba8900f
fix auto soup - check for compatible versions and fallback to a known good value as needed
2026-01-22 16:12:21 -06:00
Josh Patterson
f6e95c17a0
need to create_ca_pillar for 210 not 220
2026-01-20 11:55:57 -05:00
Josh Patterson
a192455fae
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-19 17:17:58 -05:00
Josh Patterson
0da0788e6b
move function to be with the rest of its friends
2026-01-15 14:56:36 -05:00
Josh Patterson
dfaeed54b6
Merge remote-tracking branch 'origin/2.4/main' into fixmerge201210
2026-01-15 14:44:33 -05:00
Mike Reeves
3fb153c43e
Add support for version 2.4.201 upgrades
2026-01-13 16:41:39 -05:00
Josh Patterson
3bc552ef38
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-08 17:15:48 -05:00
reyesj2
aa96cf44d4
increase timeout commands timeout to account for time taken by salt minions to return data.
...
add note informing user a previously required ES upgrade was detected and being verified before soup continues
2026-01-07 19:26:46 -06:00
reyesj2
0d59c35d2a
phrasing/typo
2026-01-07 19:20:27 -06:00
reyesj2
8463bde90d
dont capture stderr from salt command failure 'ERROR: Minions returned with non-zero exit code'
2026-01-07 19:19:26 -06:00
reyesj2
150c31009e
make sure so-elasticsearch-query exits non-zero on failure
2026-01-07 19:18:20 -06:00
reyesj2
3effd30f7e
unused var
2026-01-07 14:49:19 -06:00
reyesj2
cb1e59fa49
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup
2026-01-07 10:30:45 -06:00
reyesj2
752c764066
autosoup preserve branch setting if set originally
2026-01-07 10:03:46 -06:00
reyesj2
af604c2ea8
autosoup functionality for non-airgap
2026-01-07 09:45:26 -06:00
Josh Patterson
6c3f9f149d
create ca pillar during soup
2026-01-07 10:17:06 -05:00
Josh Patterson
f2370043a8
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-06 09:12:00 -05:00
reyesj2
a53619f10f
update kratos index template
2026-01-05 12:22:01 -06:00
reyesj2
33c34cdeca
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup
2025-12-29 15:49:49 -06:00
reyesj2
f666ad600f
accept same version 'upgrades'
2025-12-23 16:27:22 -06:00
reyesj2
9345718967
verify pre-soup ES version is directly upgradable to post-soup ES version.
2025-12-19 16:15:05 -06:00
reyesj2
6c879cbd13
soup changes
2025-12-17 19:08:21 -06:00
Mike Reeves
b2a469e08c
Update so-minion
2025-12-15 11:56:23 -05:00
Jason Ertel
285b0e4af9
Merge pull request #15308 from Security-Onion-Solutions/idstools-refactor
...
Add trailing nl if it doesnt already exist
2025-12-14 15:35:24 -05:00
DefensiveDepth
f9edfd6391
Add trailing nl if it doesnt already exist
2025-12-14 12:03:44 -05:00
Josh Patterson
a3396b77a3
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-12-12 15:25:09 -05:00
Josh Patterson
8158fee8fc
change how we determine if the salt-minion is ready
2025-12-12 15:24:47 -05:00
Josh Patterson
6c5c176b7d
fix cleaning repos on remote nodes if airgap
2025-12-12 14:18:54 -05:00
DefensiveDepth
7cac528389
Add Airgap check
2025-12-12 09:52:01 -05:00
Josh Patterson
17b5b81696
dont have py3 yaml module installed yet so do it like this
2025-12-11 18:04:02 -05:00
Josh Patterson
9960db200c
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-12-11 17:30:43 -05:00
Josh Patterson
b9ff1704b0
the great ssl refactor
2025-12-11 17:30:06 -05:00
DefensiveDepth
a945768251
Refactor backup
2025-12-11 11:15:30 -05:00
DefensiveDepth
8ef6c2f91d
small fixes
2025-12-10 15:19:44 -05:00
DefensiveDepth
72c8c2371e
Rework ordering
2025-12-08 12:39:30 -05:00
DefensiveDepth
0ff8fa57e7
be more verbose
2025-12-08 10:29:24 -05:00
DefensiveDepth
0f42233092
Make sure local salt dir is created
2025-12-07 16:13:55 -05:00
DefensiveDepth
271f545f4f
Fixup Airgap
2025-12-06 15:26:44 -05:00
DefensiveDepth
bef85772e3
Merge branch 'idstools-refactor' of https://github.com/Security-Onion-Solutions/securityonion into idstools-refactor
2025-12-05 12:17:06 -05:00
DefensiveDepth
a6b19c4a6c
Remove idstools config from manager pillar file
2025-12-05 12:13:05 -05:00
Josh Brower
44f5e6659b
Merge branch '2.4/dev' into idstools-refactor
2025-12-05 10:30:54 -05:00
reyesj2
0b127582cb
2.4.200 soup changes
2025-12-03 20:49:25 -06:00
