6736 Commits

Author	SHA1	Message	Date
Josh Brower	e83e54936e	Temp disable Elastic Registry Repo	2023-01-19 07:25:25 -05:00
weslambert	7a499c9051	Modify default 'logs-*' template priority	2023-01-18 17:24:07 -05:00
m0duspwnens	1eafb8d62a	reload salt modules when docker is installed	2023-01-18 13:46:06 -05:00
m0duspwnens	d501b0fac9	add elastic agent to assigned hostgroups	2023-01-18 09:46:55 -05:00
weslambert	1fed3cf474	Disable Kibana's native base path rewrite and add publicBaseUrl	2023-01-17 16:54:31 -05:00
Josh Patterson	2842178396	Merge pull request #9588 from Security-Onion-Solutions/2.4/firewall ... fix iptables	2023-01-17 13:50:16 -05:00
m0duspwnens	aa858bab45	fix iptables	2023-01-17 13:48:39 -05:00
weslambert	73a4dae28e	Make sure Elastic Agent data streams do not use replicas	2023-01-13 16:10:44 -05:00
Josh Patterson	3efca0010a	Merge pull request #9573 from Security-Onion-Solutions/2.4/firewall ... 2.4/firewall	2023-01-13 12:41:58 -05:00
m0duspwnens	3653df4d5f	spell it right	2023-01-13 10:18:13 -05:00
m0duspwnens	6033e9a0de	use port_bindings from docker defaults in docker states	2023-01-13 10:15:10 -05:00
weslambert	7cba5626b7	Merge pull request #9570 from Security-Onion-Solutions/fix/elasticsearch_templates_elastic_agent ... Change priority for Elastic Agent Elasticsearch index templates	2023-01-12 16:48:12 -05:00
m0duspwnens	a69b0951d3	add strelka containers	2023-01-12 16:47:34 -05:00
weslambert	654d869e3e	Change priority from 500 to 200 for Elastic Agent index templates to avoid collisions with other templates	2023-01-12 16:46:08 -05:00
m0duspwnens	d163d834d4	allow for binding ip and ports to different port number	2023-01-12 16:42:45 -05:00
weslambert	fb8d8ea972	Update Elasticsearch index template for Kratos	2023-01-12 15:31:41 -05:00
weslambert	9416552338	Don't set the Kratos index explicitly	2023-01-12 15:25:35 -05:00
weslambert	66f9a06458	Merge pull request #9566 from Security-Onion-Solutions/fix/elastic_fleet_integration_policy_load ... Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement	2023-01-11 16:17:40 -05:00
Wes	0e437f84e7	Add back echo statement to print the import policy being loaded	2023-01-11 21:13:30 +00:00
Wes	ea01e68846	Fix Zeek import policies and remove unnecessary dash in RITAENABLED statement	2023-01-11 21:01:31 +00:00
Josh Patterson	add71cbdee	Merge pull request #9565 from Security-Onion-Solutions/2.4/firewall ... 2.4/firewall	2023-01-11 15:04:25 -05:00
m0duspwnens	80f65fcd62	remove 514/tcp from filebeat for now	2023-01-11 14:54:05 -05:00
Mike Reeves	66924b63a7	Update 9999_output_redis.conf.jinja	2023-01-11 14:53:16 -05:00
Mike Reeves	bdaed849ea	Update 0900_input_redis.conf.jinja	2023-01-11 14:52:32 -05:00
m0duspwnens	0d45c1583e	add so-filebeat docker container ports and add to standalone	2023-01-11 14:48:20 -05:00
m0duspwnens	81e07997f0	add so-elastic-fleet docker container ports and add to standalone	2023-01-11 14:28:35 -05:00
weslambert	4391c22335	Move Suricata import policy definition so that it does not get caught in the for loop for Zeek policies	2023-01-11 12:23:50 -05:00
weslambert	b3e0183e39	Remove pipeline.load from top.sls so that Filebeat module loading is not attempted	2023-01-11 12:19:06 -05:00
Wes	52b620b137	Add additional conditional logic for Filebeat and disable Filebeat	2023-01-11 14:10:11 +00:00
Wes	33e2affb1d	Remove newlines from end of Syslog processor definitions	2023-01-11 14:08:28 +00:00
Wes	c3b83f1fc8	Update template settings to use data streams	2023-01-11 14:03:11 +00:00
Wes	5062dd2873	Suricata Elasticsearch ingest node pipeline changes - set 'alert' dataset	2023-01-11 14:02:09 +00:00
Wes	2e886d0c55	Remove data_index_name processor since we are using data streams	2023-01-11 13:58:38 +00:00
Wes	5d86edeed4	Modify Logstash Elastic Agent output to accomodate for events with and without 'metadata.pipeline'	2023-01-11 13:57:32 +00:00
Wes	caf0ea6b53	Add Elastic Agent policy view script	2023-01-11 13:56:21 +00:00
Wes	a146f1134e	Add Elastic Agent utility scripts	2023-01-11 13:54:42 +00:00
Mike Reeves	7cecc910d5	Merge pull request #9458 from Security-Onion-Solutions/2.4/firewall ... 2.4/firewall	2023-01-11 08:49:15 -05:00
m0duspwnens	76fff1b1e0	add logstash ports	2023-01-10 17:02:54 -05:00
Doug Burks	c15db73561	Avoid unnecessary Zeek processes in Import Mode	2023-01-10 16:48:47 -05:00
Doug Burks	554754421c	Avoid unecessary Suricata processes in Import Mode	2023-01-10 16:48:06 -05:00
Doug Burks	322efa304a	Avoid unnecessary processes in Import Mode	2023-01-10 16:47:18 -05:00
Mike Reeves	ab3a7abcc7	run restore each time	2023-01-10 16:08:44 -05:00
Mike Reeves	302bf28b6c	Merge branch '2.4/firewall' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/firewall	2023-01-09 15:00:05 -05:00
Mike Reeves	5058210bbb	Changes to iptables.jinja	2023-01-09 14:59:55 -05:00
m0duspwnens	ac157432de	include docker	2023-01-09 14:58:36 -05:00
m0duspwnens	ec5c565cec	put elastalert on sosbridge	2023-01-09 14:49:33 -05:00
m0duspwnens	dbbcea0009	look for True	2023-01-09 11:53:32 -05:00
m0duspwnens	c313b19b50	Merge remote-tracking branch 'remotes/origin/2.4/dev' into 2.4/firewall	2023-01-09 11:18:08 -05:00
Mike Reeves	73ae48d28e	Merge pull request #9539 from Security-Onion-Solutions/mkr24 ... Changes to accept minion	2023-01-09 11:17:45 -05:00
Mike Reeves	0e1e9ff343	Changes to accept minion	2023-01-09 11:15:29 -05:00