Commit Graph

11068 Commits

Author SHA1 Message Date
Jason Ertel
c5260e4787 verify setup 2023-01-19 11:25:59 -05:00
Jason Ertel
35835edf96 Merge branch '2.4/dev' into kilo 2023-01-19 11:04:32 -05:00
weslambert
8c4e00cfbd Merge pull request #9600 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_remove
Remove default "logs-*" template settings for now
2023-01-19 10:30:44 -05:00
weslambert
7d3f6121eb Remove default "logs-*" template settings for now 2023-01-19 10:29:10 -05:00
Jason Ertel
05c7999df3 merge 2023-01-19 10:06:58 -05:00
Jason Ertel
05a6d702b0 Add logic to determine if setup succeeded and provide relevant output 2023-01-19 10:03:03 -05:00
Josh Brower
8ce96942c1 Merge pull request #9599 from Security-Onion-Solutions/disablecontainer
Temp disable Elastic Registry Repo
2023-01-19 07:27:51 -05:00
Josh Brower
e83e54936e Temp disable Elastic Registry Repo 2023-01-19 07:25:25 -05:00
weslambert
90f3e33cc6 Merge pull request #9597 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_priority_modification
Modify default 'logs-*' Elasticsearch template priority
2023-01-18 17:30:52 -05:00
weslambert
7a499c9051 Modify default 'logs-*' template priority 2023-01-18 17:24:07 -05:00
weslambert
1bf088e976 Merge pull request #9591 from Security-Onion-Solutions/fix/kibana_basepath_rewrite_disable
Disable Kibana's native base path rewrite and add publicBaseUrl
2023-01-17 16:59:06 -05:00
weslambert
1fed3cf474 Disable Kibana's native base path rewrite and add publicBaseUrl 2023-01-17 16:54:31 -05:00
Josh Patterson
e0f8315d27 Merge pull request #9590 from Security-Onion-Solutions/2.4/firewall
create /opt/so/ for non manager nodes during setup
2023-01-17 15:36:34 -05:00
m0duspwnens
dbfe176b45 create /opt/so/ for non manager nodes during setup 2023-01-17 14:15:44 -05:00
Josh Patterson
2842178396 Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall
fix iptables
2023-01-17 13:50:16 -05:00
m0duspwnens
aa858bab45 fix iptables 2023-01-17 13:48:39 -05:00
weslambert
1723f58c04 Merge pull request #9579 from Security-Onion-Solutions/fix/elasticsearch_templates_so-ids
Remove so-ids since the data stream is now 'logs-suricata-*'
2023-01-13 16:17:38 -05:00
weslambert
ca80548bf0 Remove so-ids since the data stream is now 'logs-suricata-*' 2023-01-13 16:15:58 -05:00
weslambert
3e5127810d Merge pull request #9577 from Security-Onion-Solutions/fix/elasticsearch_elastic_agent_templates
Make sure Elastic Agent data streams do not use replicas
2023-01-13 16:12:09 -05:00
weslambert
73a4dae28e Make sure Elastic Agent data streams do not use replicas 2023-01-13 16:10:44 -05:00
Josh Patterson
3efca0010a Merge pull request #9573 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-13 12:41:58 -05:00
m0duspwnens
3653df4d5f spell it right 2023-01-13 10:18:13 -05:00
m0duspwnens
6033e9a0de use port_bindings from docker defaults in docker states 2023-01-13 10:15:10 -05:00
weslambert
7cba5626b7 Merge pull request #9570 from Security-Onion-Solutions/fix/elasticsearch_templates_elastic_agent
Change priority for Elastic Agent Elasticsearch index templates
2023-01-12 16:48:12 -05:00
m0duspwnens
a69b0951d3 add strelka containers 2023-01-12 16:47:34 -05:00
weslambert
654d869e3e Change priority from 500 to 200 for Elastic Agent index templates to avoid collisions with other templates 2023-01-12 16:46:08 -05:00
m0duspwnens
d163d834d4 allow for binding ip and ports to different port number 2023-01-12 16:42:45 -05:00
weslambert
be6b42494c Merge pull request #9569 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_kratos
Kratos Index Changes
2023-01-12 15:33:51 -05:00
weslambert
fb8d8ea972 Update Elasticsearch index template for Kratos 2023-01-12 15:31:41 -05:00
weslambert
9416552338 Don't set the Kratos index explicitly 2023-01-12 15:25:35 -05:00
Mike Reeves
6c8b17d4d1 Merge pull request #9567 from Security-Onion-Solutions/mkr24
Fix nsm
2023-01-12 10:43:42 -05:00
Mike Reeves
8c5a060a80 Fix nsm 2023-01-12 10:41:54 -05:00
weslambert
66f9a06458 Merge pull request #9566 from Security-Onion-Solutions/fix/elastic_fleet_integration_policy_load
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
2023-01-11 16:17:40 -05:00
Wes
0e437f84e7 Add back echo statement to print the import policy being loaded 2023-01-11 21:13:30 +00:00
Wes
ea01e68846 Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement 2023-01-11 21:01:31 +00:00
Josh Patterson
add71cbdee Merge pull request #9565 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
2023-01-11 15:04:25 -05:00
Mike Reeves
60d476457a Merge pull request #9564 from Security-Onion-Solutions/TOoSmOotH-patch-5
Update 0900_input_redis.conf.jinja
2023-01-11 14:54:40 -05:00
m0duspwnens
80f65fcd62 remove 514/tcp from filebeat for now 2023-01-11 14:54:05 -05:00
Mike Reeves
66924b63a7 Update 9999_output_redis.conf.jinja 2023-01-11 14:53:16 -05:00
Mike Reeves
bdaed849ea Update 0900_input_redis.conf.jinja 2023-01-11 14:52:32 -05:00
m0duspwnens
0d45c1583e add so-filebeat docker container ports and add to standalone 2023-01-11 14:48:20 -05:00
m0duspwnens
81e07997f0 add so-elastic-fleet docker container ports and add to standalone 2023-01-11 14:28:35 -05:00
Mike Reeves
4923fb1c35 Merge pull request #9563 from Security-Onion-Solutions/mkr24
Optimize reinstall process
2023-01-11 12:44:52 -05:00
Mike Reeves
8fa8b89d9c Fix reinstall logic 2023-01-11 12:43:22 -05:00
Mike Reeves
bab010a109 Fix reinstall logic 2023-01-11 12:40:18 -05:00
Mike Reeves
c07821a612 Fix reinstall logic 2023-01-11 12:32:43 -05:00
weslambert
acad7acc4a Merge pull request #9562 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_load_suricata_import
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
2023-01-11 12:27:37 -05:00
Mike Reeves
b36f1bc79e Fix reinstall logic 2023-01-11 12:26:50 -05:00
weslambert
4391c22335 Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies 2023-01-11 12:23:50 -05:00
weslambert
39d1f07fab Merge pull request #9561 from Security-Onion-Solutions/fix/filebeat_remove_module_setup
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
2023-01-11 12:21:39 -05:00