Commit Graph

3359 Commits

Author SHA1 Message Date
m0duspwnens
c68b87db56 set steno running default based on sensor role or not 2020-12-16 09:33:44 -05:00
TOoSmOotH
805e25f495 Fix typeo 2020-12-15 20:40:59 -05:00
TOoSmOotH
4ca4141819 Fix conditional statement 2020-12-15 19:29:35 -05:00
TOoSmOotH
f1be6cc259 Check MD5 of all components 2020-12-15 18:32:07 -05:00
TOoSmOotH
e30d7a8d8e Fix upgrade docker variable 2020-12-15 18:25:41 -05:00
TOoSmOotH
87882b4d91 Fix upgrade function 2020-12-15 18:18:26 -05:00
TOoSmOotH
082fd51b05 Remove extra variable 2020-12-15 17:07:40 -05:00
TOoSmOotH
04a26df4f7 Fix the features suffix 2020-12-15 17:05:33 -05:00
TOoSmOotH
7909834722 Clean up previous upgrade dirs in temp 2020-12-15 16:23:49 -05:00
Mike Reeves
06dd3432f8 Copy the correct files over that soup needs 2020-12-15 16:13:51 -05:00
Mike Reeves
6cab65a548 Update so-image-common 2020-12-15 16:06:21 -05:00
William Wernert
15347d1209 [fix] More condition changes for Helix 2020-12-15 15:08:33 -05:00
William Wernert
c7c3d004ca [fix] More helix -> helixsensor 2020-12-15 14:01:19 -05:00
William Wernert
1825776271 [fix] helix -> helixsensor 2020-12-15 13:58:36 -05:00
William Wernert
f7d02763e8 [fix] Move FEATURESCHECK var assignment, fix indentation 2020-12-15 13:07:21 -05:00
William Wernert
f70d828aa6 [fix] Create array correctly 2020-12-15 13:04:09 -05:00
Jason Ertel
3da7a26e88 Remove jinja whitespace trimming to avoid syntax error in bash 2020-12-15 12:37:05 -05:00
Mike Reeves
922534a5da Merge pull request #2352 from Security-Onion-Solutions/soup2320
SOUP Features
2020-12-15 12:07:19 -05:00
TOoSmOotH
80a61d3316 SOUP Features 2020-12-15 12:06:30 -05:00
Mike Reeves
bf1f00d2fe Merge pull request #2348 from Security-Onion-Solutions/soup2320
SOUP Changes
2020-12-14 21:19:45 -05:00
TOoSmOotH
cbd59ed86a SOUP Changes 2020-12-14 20:46:31 -05:00
Josh Brower
efe44323cb Merge pull request #2346 from Security-Onion-Solutions/bugfix/fleet-patch
Swap localhost for 127.0.0.1
2020-12-14 15:49:58 -05:00
William Wernert
3e2a9cc884 Merge branch 'dev' into experimental 2020-12-14 12:32:53 -05:00
Doug Burks
7a314b5935 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 11:35:29 -05:00
Doug Burks
61ae187d03 revert previous commit #2321 2020-12-12 10:12:23 -05:00
Josh Brower
73d23e6d17 Revert "Initial support - Playbook Overrides"
This reverts commit 8915e49288.
2020-12-12 10:07:30 -05:00
Josh Brower
8faf80a03b Revert "Playbook db updates"
This reverts commit 35be785f7a.
2020-12-12 10:07:23 -05:00
Mike Reeves
b5ed973abd Merge pull request #2138 from OmerTirosh/OmerTirosh-fix-win.eventlog
Fix Error: SO elasticsearch ingest failed to convert 'winlog.event_data.SubjectUserName' to 'user.name'
2020-12-12 10:00:27 -05:00
Doug Burks
85aac4ad75 Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321 2020-12-12 09:22:08 -05:00
Josh Brower
66495e6bae Swap localhost for 127.0.0.1 2020-12-11 17:38:42 -05:00
m0duspwnens
09b3a4a0dd merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:35:06 -05:00
m0duspwnens
b8e8510dd2 merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 2020-12-11 14:26:32 -05:00
Jason Ertel
eb735c7289 Replace duplicate random generator with common function 2020-12-11 13:22:13 -05:00
Josh Patterson
2f2867804a Merge pull request #2318 from Security-Onion-Solutions/issue/1175
pillarize grafana and allow for grafana alerts to be created
2020-12-11 12:36:06 -05:00
m0duspwnens
d877fac786 add null for max graph value https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:28:43 -05:00
m0duspwnens
c88a1a943d update search and sensor node dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:21:16 -05:00
m0duspwnens
e3335a3106 update managersearch dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 12:00:02 -05:00
m0duspwnens
0a77a28e06 guage to graph cor cpu on manager and eval https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:51:42 -05:00
m0duspwnens
6eb64227ae update manager dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:44:21 -05:00
m0duspwnens
5a95181b2b update eval version 1 https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:36:19 -05:00
m0duspwnens
2fc151d923 update eval dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 11:34:08 -05:00
m0duspwnens
33fde42dbc dont show legend on pcap retention panel 2020-12-11 10:42:30 -05:00
m0duspwnens
e0e38ac37f update standlone dashboard panaels from guage to graph https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-11 10:39:25 -05:00
Jason Ertel
0915ae30e4 Add timestamps to so-yara-update output 2020-12-11 10:08:10 -05:00
Jason Ertel
14f28e38be Ensure so-yara-updata script is logging to a file during cron job execution 2020-12-11 10:04:43 -05:00
m0duspwnens
fbcc62d5c5 Merge remote-tracking branch 'remotes/origin/dev' into issue/1175 2020-12-10 15:17:45 -05:00
m0duspwnens
733f5a5021 allowUiUpdates to dashboards to allow for alert creation on stock dashboards issue/1175 2020-12-10 15:17:22 -05:00
Mike Reeves
cd6a945a24 Merge pull request #2298 from Security-Onion-Solutions/escluster
Traditional ES Clustering Support
2020-12-10 12:07:17 -05:00
m0duspwnens
4ee944448f remove $Interval template var since alerts cant be crated when it is used https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-10 12:05:57 -05:00
TOoSmOotH
42833b2086 Make non clustered node attributes 2020-12-10 11:14:32 -05:00