Jason Ertel
|
c5260e4787
|
verify setup
|
2023-01-19 11:25:59 -05:00 |
|
Jason Ertel
|
35835edf96
|
Merge branch '2.4/dev' into kilo
|
2023-01-19 11:04:32 -05:00 |
|
weslambert
|
8c4e00cfbd
|
Merge pull request #9600 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_remove
Remove default "logs-*" template settings for now
|
2023-01-19 10:30:44 -05:00 |
|
weslambert
|
7d3f6121eb
|
Remove default "logs-*" template settings for now
|
2023-01-19 10:29:10 -05:00 |
|
Jason Ertel
|
05c7999df3
|
merge
|
2023-01-19 10:06:58 -05:00 |
|
Jason Ertel
|
05a6d702b0
|
Add logic to determine if setup succeeded and provide relevant output
|
2023-01-19 10:03:03 -05:00 |
|
Josh Brower
|
8ce96942c1
|
Merge pull request #9599 from Security-Onion-Solutions/disablecontainer
Temp disable Elastic Registry Repo
|
2023-01-19 07:27:51 -05:00 |
|
Josh Brower
|
e83e54936e
|
Temp disable Elastic Registry Repo
|
2023-01-19 07:25:25 -05:00 |
|
weslambert
|
90f3e33cc6
|
Merge pull request #9597 from Security-Onion-Solutions/fix/elasticsearch_template_logs_default_priority_modification
Modify default 'logs-*' Elasticsearch template priority
|
2023-01-18 17:30:52 -05:00 |
|
weslambert
|
7a499c9051
|
Modify default 'logs-*' template priority
|
2023-01-18 17:24:07 -05:00 |
|
weslambert
|
1bf088e976
|
Merge pull request #9591 from Security-Onion-Solutions/fix/kibana_basepath_rewrite_disable
Disable Kibana's native base path rewrite and add publicBaseUrl
|
2023-01-17 16:59:06 -05:00 |
|
weslambert
|
1fed3cf474
|
Disable Kibana's native base path rewrite and add publicBaseUrl
|
2023-01-17 16:54:31 -05:00 |
|
Josh Patterson
|
e0f8315d27
|
Merge pull request #9590 from Security-Onion-Solutions/2.4/firewall
create /opt/so/ for non manager nodes during setup
|
2023-01-17 15:36:34 -05:00 |
|
m0duspwnens
|
dbfe176b45
|
create /opt/so/ for non manager nodes during setup
|
2023-01-17 14:15:44 -05:00 |
|
Josh Patterson
|
2842178396
|
Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall
fix iptables
|
2023-01-17 13:50:16 -05:00 |
|
m0duspwnens
|
aa858bab45
|
fix iptables
|
2023-01-17 13:48:39 -05:00 |
|
weslambert
|
1723f58c04
|
Merge pull request #9579 from Security-Onion-Solutions/fix/elasticsearch_templates_so-ids
Remove so-ids since the data stream is now 'logs-suricata-*'
|
2023-01-13 16:17:38 -05:00 |
|
weslambert
|
ca80548bf0
|
Remove so-ids since the data stream is now 'logs-suricata-*'
|
2023-01-13 16:15:58 -05:00 |
|
weslambert
|
3e5127810d
|
Merge pull request #9577 from Security-Onion-Solutions/fix/elasticsearch_elastic_agent_templates
Make sure Elastic Agent data streams do not use replicas
|
2023-01-13 16:12:09 -05:00 |
|
weslambert
|
73a4dae28e
|
Make sure Elastic Agent data streams do not use replicas
|
2023-01-13 16:10:44 -05:00 |
|
Josh Patterson
|
3efca0010a
|
Merge pull request #9573 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-13 12:41:58 -05:00 |
|
m0duspwnens
|
3653df4d5f
|
spell it right
|
2023-01-13 10:18:13 -05:00 |
|
m0duspwnens
|
6033e9a0de
|
use port_bindings from docker defaults in docker states
|
2023-01-13 10:15:10 -05:00 |
|
weslambert
|
7cba5626b7
|
Merge pull request #9570 from Security-Onion-Solutions/fix/elasticsearch_templates_elastic_agent
Change priority for Elastic Agent Elasticsearch index templates
|
2023-01-12 16:48:12 -05:00 |
|
m0duspwnens
|
a69b0951d3
|
add strelka containers
|
2023-01-12 16:47:34 -05:00 |
|
weslambert
|
654d869e3e
|
Change priority from 500 to 200 for Elastic Agent index templates to avoid collisions with other templates
|
2023-01-12 16:46:08 -05:00 |
|
m0duspwnens
|
d163d834d4
|
allow for binding ip and ports to different port number
|
2023-01-12 16:42:45 -05:00 |
|
weslambert
|
be6b42494c
|
Merge pull request #9569 from Security-Onion-Solutions/fix/elasticsearch_ingest_pipeline_kratos
Kratos Index Changes
|
2023-01-12 15:33:51 -05:00 |
|
weslambert
|
fb8d8ea972
|
Update Elasticsearch index template for Kratos
|
2023-01-12 15:31:41 -05:00 |
|
weslambert
|
9416552338
|
Don't set the Kratos index explicitly
|
2023-01-12 15:25:35 -05:00 |
|
Mike Reeves
|
6c8b17d4d1
|
Merge pull request #9567 from Security-Onion-Solutions/mkr24
Fix nsm
|
2023-01-12 10:43:42 -05:00 |
|
Mike Reeves
|
8c5a060a80
|
Fix nsm
|
2023-01-12 10:41:54 -05:00 |
|
weslambert
|
66f9a06458
|
Merge pull request #9566 from Security-Onion-Solutions/fix/elastic_fleet_integration_policy_load
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
|
2023-01-11 16:17:40 -05:00 |
|
Wes
|
0e437f84e7
|
Add back echo statement to print the import policy being loaded
|
2023-01-11 21:13:30 +00:00 |
|
Wes
|
ea01e68846
|
Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement
|
2023-01-11 21:01:31 +00:00 |
|
Josh Patterson
|
add71cbdee
|
Merge pull request #9565 from Security-Onion-Solutions/2.4/firewall
2.4/firewall
|
2023-01-11 15:04:25 -05:00 |
|
Mike Reeves
|
60d476457a
|
Merge pull request #9564 from Security-Onion-Solutions/TOoSmOotH-patch-5
Update 0900_input_redis.conf.jinja
|
2023-01-11 14:54:40 -05:00 |
|
m0duspwnens
|
80f65fcd62
|
remove 514/tcp from filebeat for now
|
2023-01-11 14:54:05 -05:00 |
|
Mike Reeves
|
66924b63a7
|
Update 9999_output_redis.conf.jinja
|
2023-01-11 14:53:16 -05:00 |
|
Mike Reeves
|
bdaed849ea
|
Update 0900_input_redis.conf.jinja
|
2023-01-11 14:52:32 -05:00 |
|
m0duspwnens
|
0d45c1583e
|
add so-filebeat docker container ports and add to standalone
|
2023-01-11 14:48:20 -05:00 |
|
m0duspwnens
|
81e07997f0
|
add so-elastic-fleet docker container ports and add to standalone
|
2023-01-11 14:28:35 -05:00 |
|
Mike Reeves
|
4923fb1c35
|
Merge pull request #9563 from Security-Onion-Solutions/mkr24
Optimize reinstall process
|
2023-01-11 12:44:52 -05:00 |
|
Mike Reeves
|
8fa8b89d9c
|
Fix reinstall logic
|
2023-01-11 12:43:22 -05:00 |
|
Mike Reeves
|
bab010a109
|
Fix reinstall logic
|
2023-01-11 12:40:18 -05:00 |
|
Mike Reeves
|
c07821a612
|
Fix reinstall logic
|
2023-01-11 12:32:43 -05:00 |
|
weslambert
|
acad7acc4a
|
Merge pull request #9562 from Security-Onion-Solutions/fix/elastic_agent_integration_policy_load_suricata_import
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
|
2023-01-11 12:27:37 -05:00 |
|
Mike Reeves
|
b36f1bc79e
|
Fix reinstall logic
|
2023-01-11 12:26:50 -05:00 |
|
weslambert
|
4391c22335
|
Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies
|
2023-01-11 12:23:50 -05:00 |
|
weslambert
|
39d1f07fab
|
Merge pull request #9561 from Security-Onion-Solutions/fix/filebeat_remove_module_setup
Remove pipeline.load from top.sls so that Filebeat module loading is not attempted
|
2023-01-11 12:21:39 -05:00 |
|