be35b59b8c
Update echo messages for PCAP engine clarity
2026-02-24 10:04:26 -05:00
7170289a5e
Continue upgrade after pcapengine is changed to SURICATA
...
Instead of exiting and requiring the user to rerun the script after
changing pcapengine to SURICATA, let the script continue to the
version check and upgrade.
2026-02-23 11:35:32 -05:00
ca040044bb
Use so-yaml to update pcapengine pillar and fix file path
...
Replace fragile sed with so-yaml.py replace for proper YAML handling.
Also correct the pillar file path from soc_soc.sls to soc_global.sls.
2026-02-23 11:16:30 -05:00
f17e2961ed
Add PCAP orphan warning and require SURICATA before upgrade
...
- Warn users that undeleted Stenographer PCAP data will be inaccessible
and never automatically cleaned up if they switch to SURICATA without
deleting it first
- Require pcapengine to be set to SURICATA before allowing upgrade,
with clear messaging when the user declines to change it
2026-02-23 11:05:30 -05:00
bbc7668786
Add version check, PCAP cleanup prompts, and SOC config references to soupto3
...
- Skip upgrade if already running Security Onion 3.x.x
- Add interactive prompts to delete Stenographer PCAP data (with double confirmation) and change pcapengine to SURICATA
- Direct users to SOC Configuration UI instead of editing pillar files directly
- Consolidate TRANSITION and STENO cases to reduce repeated code
2026-02-23 10:49:54 -05:00
1888f9e757
Soup to 3
2026-02-23 10:07:16 -05:00
057131dce7
disable redis on heavynodes -- no longer in use
2026-01-27 16:39:07 -06:00
b4c8f7924a
missing updates to variables
2026-01-22 16:49:20 -06:00
8e3ba8900f
fix auto soup - check for compatible versions and fallback to a known good value as needed
2026-01-22 16:12:21 -06:00
f6e95c17a0
need to create_ca_pillar for 210 not 220
2026-01-20 11:55:57 -05:00
a192455fae
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-19 17:17:58 -05:00
0da0788e6b
move function to be with the rest of its friends
2026-01-15 14:56:36 -05:00
dfaeed54b6
Merge remote-tracking branch 'origin/2.4/main' into fixmerge201210
2026-01-15 14:44:33 -05:00
3fb153c43e
Add support for version 2.4.201 upgrades
2026-01-13 16:41:39 -05:00
3bc552ef38
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-08 17:15:48 -05:00
aa96cf44d4
increase timeout commands timeout to account for time taken by salt minions to return data.
...
add note informing user a previously required ES upgrade was detected and being verified before soup continues
2026-01-07 19:26:46 -06:00
0d59c35d2a
phrasing/typo
2026-01-07 19:20:27 -06:00
8463bde90d
dont capture stderr from salt command failure 'ERROR: Minions returned with non-zero exit code'
2026-01-07 19:19:26 -06:00
150c31009e
make sure so-elasticsearch-query exits non-zero on failure
2026-01-07 19:18:20 -06:00
3effd30f7e
unused var
2026-01-07 14:49:19 -06:00
cb1e59fa49
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup
2026-01-07 10:30:45 -06:00
752c764066
autosoup preserve branch setting if set originally
2026-01-07 10:03:46 -06:00
af604c2ea8
autosoup functionality for non-airgap
2026-01-07 09:45:26 -06:00
6c3f9f149d
create ca pillar during soup
2026-01-07 10:17:06 -05:00
f2370043a8
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2026-01-06 09:12:00 -05:00
a53619f10f
update kratos index template
2026-01-05 12:22:01 -06:00
33c34cdeca
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into reyesj2/elastic9-autosoup
2025-12-29 15:49:49 -06:00
f666ad600f
accept same version 'upgrades'
2025-12-23 16:27:22 -06:00
9345718967
verify pre-soup ES version is directly upgradable to post-soup ES version.
2025-12-19 16:15:05 -06:00
6c879cbd13
soup changes
2025-12-17 19:08:21 -06:00
b2a469e08c
Update so-minion
2025-12-15 11:56:23 -05:00
285b0e4af9
Merge pull request #15308 from Security-Onion-Solutions/idstools-refactor
...
Add trailing nl if it doesnt already exist
2025-12-14 15:35:24 -05:00
f9edfd6391
Add trailing nl if it doesnt already exist
2025-12-14 12:03:44 -05:00
a3396b77a3
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-12-12 15:25:09 -05:00
8158fee8fc
change how we determine if the salt-minion is ready
2025-12-12 15:24:47 -05:00
6c5c176b7d
fix cleaning repos on remote nodes if airgap
2025-12-12 14:18:54 -05:00
7cac528389
Add Airgap check
2025-12-12 09:52:01 -05:00
17b5b81696
dont have py3 yaml module installed yet so do it like this
2025-12-11 18:04:02 -05:00
9960db200c
Merge remote-tracking branch 'origin/2.4/dev' into bravo
2025-12-11 17:30:43 -05:00
b9ff1704b0
the great ssl refactor
2025-12-11 17:30:06 -05:00
a945768251
Refactor backup
2025-12-11 11:15:30 -05:00
8ef6c2f91d
small fixes
2025-12-10 15:19:44 -05:00
72c8c2371e
Rework ordering
2025-12-08 12:39:30 -05:00
0ff8fa57e7
be more verbose
2025-12-08 10:29:24 -05:00
0f42233092
Make sure local salt dir is created
2025-12-07 16:13:55 -05:00
271f545f4f
Fixup Airgap
2025-12-06 15:26:44 -05:00
bef85772e3
Merge branch 'idstools-refactor' of https://github.com/Security-Onion-Solutions/securityonion into idstools-refactor
2025-12-05 12:17:06 -05:00
a6b19c4a6c
Remove idstools config from manager pillar file
2025-12-05 12:13:05 -05:00
44f5e6659b
Merge branch '2.4/dev' into idstools-refactor
2025-12-05 10:30:54 -05:00
0b127582cb
2.4.200 soup changes
2025-12-03 20:49:25 -06:00
Mike Reeves
Mike Reeves
reyesj2
Josh Patterson
Jason Ertel
DefensiveDepth