32 Commits

Author	SHA1	Message	Date
reyesj2	2baf2478da	add additional elasticsearch log output in json format for elasticsearch log integration to parse	2025-10-14 12:47:03 -05:00
reyesj2	7af95317db	es upgrade 8.18.8 pipeline updates	2025-10-06 16:23:22 -05:00
reyesj2	0606c0a454	agent monitor template & dataset name update	2025-09-12 14:26:22 -05:00
reyesj2	a7651b2734	lower filestream fingerprint length	2025-09-11 14:30:49 -05:00
reyesj2	8f36d2ec00	update log file name	2025-09-09 15:38:50 -05:00
reyesj2	1a32a0897c	Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/ea-alerter	2025-09-02 17:11:21 -05:00
reyesj2	e26310d172	elastic agent offline alerter ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2025-09-02 17:00:03 -05:00
reyesj2	a5675a79fe	es 8.18.6 pipeline upd	2025-08-28 19:45:17 -05:00
reyesj2	e8c25d157f	drop empty ip fields when its a opencanary startup log (1001) to prevent elasticsearch doc ingest error	2025-07-23 15:52:50 -05:00
reyesj2	2e5682f11c	8.18.4 import evtx pipelines	2025-07-23 09:53:04 -05:00
reyesj2	a4e8e7ea53	update syslog-tcp-514 policy	2025-07-10 13:12:26 -05:00
reyesj2	bef2fa9e8d	8.18.3 pipeline updates	2025-07-08 16:09:16 -05:00
Josh Brower	152fdaa7bb	Support Kratos user.name lookup	2025-04-15 11:40:43 -04:00
Josh Brower	4cdfb6e3eb	Fix comma	2025-04-11 07:49:35 -04:00
Josh Brower	f94c81a041	Extract log level and drop INFO level	2025-04-11 07:45:12 -04:00
reyesj2	11dc004811	ES 8.17.3	2025-03-04 14:24:38 -06:00
reyesj2	69b559fb26	ES 8.17.2 pipeline version updates	2025-02-20 17:11:28 -06:00
reyesj2	21ed1439e2	update udp integration policy	2025-02-18 10:40:18 -06:00
Josh Brower	97a3f130c8	Update Elastic	2025-01-23 15:32:39 -05:00
Jason Ertel	57a9992a3d	Merge branch '2.4/dev' into jertel/wip	2024-11-11 10:06:44 -05:00
defensivedepth	4c5099d429	Initial support for local lookup	2024-10-29 10:27:54 -04:00
Jason Ertel	523ff66389	connect work	2024-10-16 13:44:01 -04:00
weslambert	af80a78406	Update pipeline version	2024-08-27 13:08:35 -04:00
DefensiveDepth	3c3ed8b5c5	Add runtime status logs	2024-04-24 16:33:47 -04:00
DefensiveDepth	376efab40c	Ship Defender logs	2024-04-08 14:01:38 -04:00
Wes	5542db0aac	Leave package version null	2024-01-22 21:07:46 +00:00
Wes	b08db3e05a	Add RITA policy	2024-01-22 20:16:43 +00:00
Wes	22fcccef1c	Add force option	2023-12-14 16:53:19 +00:00
Jonathan Race	ece3c367b5	Update import-evtx-logs.json ... version updates to match 2.4 release pipelines	2023-11-29 09:20:37 -05:00
Wes	7971d9749a	Assign pipeline to import	2023-08-17 14:08:48 +00:00
Wes	29b64eadd4	Change log.log to log.logs	2023-08-01 02:20:22 +00:00
Josh Brower	bb0cfc5253	Create & assign Heavy Node Fleet Policy	2023-06-23 15:49:03 -04:00