Commit Graph

618 Commits

Author SHA1 Message Date
m0duspwnens 98837bc379 this method does not cause soup to fail 2024-06-12 09:11:02 -04:00
m0duspwnens 88fc1bbe32 quotes on vars 2024-06-11 16:32:57 -04:00
m0duspwnens 2ecac38f6d disable logstash on heavynodes 2024-06-11 13:50:29 -04:00
reyesj2 628893fd5b remove redundant 'kafka_' from annotations & defaults
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-06-11 11:56:21 -04:00
reyesj2 824f852ed7 merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-06-10 11:26:23 -04:00
Jason Ertel f1638faa3a correct placement of error check override 2024-06-08 08:18:34 -04:00
Jason Ertel dea786abfa Merge pull request #13170 from Security-Onion-Solutions/jertel/yaml
gracefully handle missing parent key
2024-06-08 07:49:49 -04:00
Jason Ertel f96b82b112 gracefully handle missing parent key 2024-06-08 07:44:46 -04:00
Josh Patterson 95fe11c6b4 Merge pull request #13162 from Security-Onion-Solutions/soupmsgq
fix elastic templates not loading due to global_override phases
2024-06-07 16:23:03 -04:00
Jason Ertel f2f688b9b8 Update soup 2024-06-07 16:18:09 -04:00
m0duspwnens 0139e18271 additional description 2024-06-07 16:03:21 -04:00
Corey Ogburn 5d3fd3d389 AdditionalCA and InsecureSkipVerify
New fields have been added to manager and then duplicated over to SOC's config in the same vein as how proxy was updated earlier this week.

AdditionalCA holds the PEM formatted public keys that should be trusted when making requests. It has been implemented for both Sigma's zip downloads and Sigma and Suricata's repository clones and pulls.

InsecureSkipVerify has been added to help our users troubleshoot their configuration. Setting it to true will not verify the cert on outgoing requests. Self signed, missing, or invalid certs will not throw an error.
2024-06-07 12:47:09 -06:00
m0duspwnens f5cc35509b fix output alignment 2024-06-07 11:03:26 -04:00
m0duspwnens d39c8fae54 format output 2024-06-07 09:01:16 -04:00
m0duspwnens d3b81babec check for phases with so-yaml, remove if exists 2024-06-06 16:15:21 -04:00
m0duspwnens a39c88c7b4 add set to troubleshoot failure 2024-06-06 12:56:24 -04:00
m0duspwnens 73ebf5256a Merge remote-tracking branch 'origin/2.4/dev' into soupmsgq 2024-06-06 12:44:45 -04:00
Jason Ertel 5600fed9c4 add ability to retrieve yaml values via so-yaml.py; improve so-minion id matching 2024-06-06 11:56:07 -04:00
m0duspwnens 6920b77b4a fix msg 2024-06-06 11:00:43 -04:00
m0duspwnens ccd6b3914c add final msg queue for soup. 2024-06-06 10:33:55 -04:00
reyesj2 2e85a28c02 Remove so-kafka-clusterid script, created during soup
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-06-02 18:25:59 -04:00
reyesj2 1a832fa0a5 Move soup kafka needfuls to up_to_2.4.80
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-05-31 14:04:46 -04:00
reyesj2 75bdc92bbf Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka 2024-05-31 14:02:43 -04:00
m0duspwnens debf093c54 Merge remote-tracking branch 'origin/2.4/dev' into salt3006.8 2024-05-30 15:58:10 -04:00
m0duspwnens 7702f05756 upgrade salt 3006.8. soup for 2.4.80 2024-05-30 15:00:32 -04:00
reyesj2 1fd5165079 Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/kafka
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
2024-05-29 23:37:40 -04:00
DefensiveDepth 0d034e7adc fix rsync 2024-05-29 10:55:56 -04:00
DefensiveDepth ee4ca0d7a2 Check to see if local exists 2024-05-28 10:24:09 -04:00
DefensiveDepth f68ac23f0e Fix fi
Signed-off-by: DefensiveDepth <Josh@defensivedepth.com>
2024-05-28 10:03:31 -04:00
DefensiveDepth 2a2b86ebe6 Dont overwrite 2024-05-28 09:43:45 -04:00
DefensiveDepth 74dfc25376 backup local rules 2024-05-28 09:29:10 -04:00
DefensiveDepth 81ee60e658 Backup .yml files too 2024-05-28 06:42:18 -04:00
DefensiveDepth 58b565558d Dont bail - just wait for enter 2024-05-24 16:21:59 -04:00
Mike Reeves ab9ec2ec6b Update soup 2024-05-15 18:04:01 -04:00
m0duspwnens 8076ea0e0a add another space 2024-05-15 16:34:05 -04:00
m0duspwnens 3a56058f7f update description 2024-05-15 15:31:31 -04:00
m0duspwnens 62a8024c6c Merge remote-tracking branch 'origin/2.4/dev' into issue/13012 2024-05-15 13:48:46 -04:00
m0duspwnens ea253726a0 fix soup 2024-05-15 13:48:32 -04:00
Mike Reeves e3a0847867 Update soup 2024-05-15 11:31:41 -04:00
m0duspwnens 51862e5803 remove idh.services from idh node pillar files 2024-05-14 13:08:51 -04:00
weslambert 6dec9b4cf7 Merge pull request #12986 from Security-Onion-Solutions/fix/old_strelka
Remove old Strelka configuration for YARA
2024-05-14 09:27:19 -04:00
weslambert 13062099b3 Remove YARA script update and reference to exclusions 2024-05-13 18:04:16 -04:00
Josh Patterson 437d0028db Merge pull request #13003 from Security-Onion-Solutions/localdirs
create local directories during soup if needed
2024-05-13 16:33:04 -04:00
m0duspwnens 649f52dac7 create_local_directories in soup too 2024-05-13 10:37:56 -04:00
Mike Reeves 9d6f6c7893 Update soup 2024-05-13 10:09:35 -04:00
Mike Reeves 6c71c45ef6 Update soup 2024-05-13 09:55:57 -04:00
Mike Reeves 641899ad56 Backup Suricata for migration and remove advanced from reverselookups 2024-05-13 09:50:14 -04:00
Jason Ertel 154dc605ef Merge pull request #12994 from Security-Onion-Solutions/jertel/testcy
support upgrade tests
2024-05-10 16:57:19 -04:00
Jason Ertel 2a0e33401d support upgrade tests 2024-05-10 16:54:50 -04:00
Wes ea4cf42913 Remove old YARA update script 2024-05-09 17:26:54 +00:00