m0duspwnens
|
ce0a39db4b
|
remove old EXTRAHOSTNAME EXTRAHOSTIP from being set for logstash
|
2021-12-15 09:43:46 -05:00 |
|
m0duspwnens
|
ea89d2074b
|
remove ca from allowed_hosts on so-receiver
|
2021-12-15 09:32:12 -05:00 |
|
m0duspwnens
|
759bf9837e
|
pillar top clean up for receiver and logstash.nodes
|
2021-12-15 09:31:03 -05:00 |
|
m0duspwnens
|
d9a384cc29
|
remove global:pipeline pillar call from logstash pipeline pillars
|
2021-12-15 09:30:15 -05:00 |
|
m0duspwnens
|
176ef852c8
|
clean up assinged hostgroups for receiver
|
2021-12-15 08:28:40 -05:00 |
|
m0duspwnens
|
024860d0ae
|
rename EXTRA_NODES to LOGSTASH_NODES AND REDIS_NODES
|
2021-12-14 23:43:06 -05:00 |
|
m0duspwnens
|
0c6aba16ec
|
fix redis input
|
2021-12-14 23:42:37 -05:00 |
|
m0duspwnens
|
15b8d80b71
|
fix host for input_redis
|
2021-12-14 18:51:43 -05:00 |
|
m0duspwnens
|
55b74abcc5
|
extra_hosts and redis_input for logstash
|
2021-12-14 18:49:30 -05:00 |
|
m0duspwnens
|
4da017d61c
|
change extra_hosts for docker container
|
2021-12-14 17:05:30 -05:00 |
|
m0duspwnens
|
a31d61e151
|
handle ca for redis
|
2021-12-14 16:43:04 -05:00 |
|
m0duspwnens
|
841b91e052
|
exclude elasticsearch and managerssl keys and certs from receiver
|
2021-12-14 16:05:47 -05:00 |
|
m0duspwnens
|
d0b6d5bba6
|
remove so-eval from lists since it doesnt run logstash
|
2021-12-14 15:33:06 -05:00 |
|
m0duspwnens
|
a31f034f2e
|
remove receiver add node for cacerts and tls-ca-bundle for logstash bind
|
2021-12-14 15:02:59 -05:00 |
|
m0duspwnens
|
6962e3f9b3
|
fix logstash certs mapped into container
|
2021-12-14 14:52:15 -05:00 |
|
m0duspwnens
|
c490a3be36
|
move node_data pillar to logstash:nodes, set extra hosts for filebeat docker
|
2021-12-14 13:32:42 -05:00 |
|
m0duspwnens
|
6518691c55
|
sort the items
|
2021-12-13 18:16:25 -05:00 |
|
m0duspwnens
|
067e79894f
|
fix loop for node_data
|
2021-12-13 16:26:38 -05:00 |
|
m0duspwnens
|
6de2f5bd03
|
fix node_data
|
2021-12-13 15:55:09 -05:00 |
|
m0duspwnens
|
8d0872bce5
|
create node_data pillar from mine data, use node_data pillar for filebeat config
|
2021-12-13 15:48:30 -05:00 |
|
m0duspwnens
|
86f67198bf
|
loadbalance filebeat if across managers and receivers
|
2021-12-10 17:43:06 -05:00 |
|
m0duspwnens
|
fe7247f876
|
update fw for receiver and add mine_functions for ip_addr
|
2021-12-10 15:28:40 -05:00 |
|
m0duspwnens
|
54c32acdbf
|
dont call logstash_pillar if manager or helix
|
2021-12-09 15:26:00 -05:00 |
|
m0duspwnens
|
d94496bb90
|
remove minio_key and add missing endif
|
2021-12-09 13:24:20 -05:00 |
|
m0duspwnens
|
c2a952796c
|
Merge remote-tracking branch 'remotes/origin/sans' into issue/6469
|
2021-12-09 13:13:18 -05:00 |
|
Mike Reeves
|
b92cbb01b3
|
SSL modifications
|
2021-12-09 13:13:01 -05:00 |
|
m0duspwnens
|
5b70d5510f
|
Merge remote-tracking branch 'remotes/origin/sans' into issue/6469
|
2021-12-09 13:12:00 -05:00 |
|
Mike Reeves
|
a7f0d81555
|
SSL modifications
|
2021-12-09 13:07:00 -05:00 |
|
m0duspwnens
|
7390b03dc1
|
dont show es options in final whiptail setup confirmation
|
2021-12-08 14:58:34 -05:00 |
|
m0duspwnens
|
b4bc32d3ca
|
set logstash pillar and enable avanced ls menu for so-receiver
|
2021-12-08 14:33:15 -05:00 |
|
m0duspwnens
|
ecc8594d44
|
prevent so-receiver from getting extra keys/certs
|
2021-12-08 13:32:56 -05:00 |
|
m0duspwnens
|
59464af10c
|
filebeat certs for logstash on so-receiver
|
2021-12-08 09:41:17 -05:00 |
|
m0duspwnens
|
1ef63f3a23
|
ssl things for so-receiver
|
2021-12-08 09:08:46 -05:00 |
|
m0duspwnens
|
c80059efb0
|
change from || to &&
|
2021-12-07 17:11:15 -05:00 |
|
m0duspwnens
|
8c95d0f36b
|
set ip for wazuh-register-agent and dont apply nginx in setup for receiver
|
2021-12-07 16:50:41 -05:00 |
|
m0duspwnens
|
429b9cab2f
|
set ip for ossec.conf
|
2021-12-07 16:22:07 -05:00 |
|
m0duspwnens
|
f8da5c7fe9
|
start of fw rules for receiver
|
2021-12-07 15:59:11 -05:00 |
|
m0duspwnens
|
06010bd157
|
add so-receiver to allowed_states
|
2021-12-07 13:34:06 -05:00 |
|
m0duspwnens
|
f3ec5df447
|
add receiver node
|
2021-12-07 11:13:51 -05:00 |
|
m0duspwnens
|
7549e34881
|
Merge remote-tracking branch 'remotes/origin/dev' into issue/6469
|
2021-12-07 10:57:12 -05:00 |
|
m0duspwnens
|
ba30c59ec7
|
add receiver node
|
2021-12-07 10:56:35 -05:00 |
|
Mike Reeves
|
892899b7f9
|
Merge pull request #6477 from Security-Onion-Solutions/merge-202112071526
Merge hotfix
|
2021-12-07 10:30:13 -05:00 |
|
Jason Ertel
|
702d95c63a
|
Merge branch 'master' into merge-202112071527
|
2021-12-07 10:28:00 -05:00 |
|
m0duspwnens
|
96666ab307
|
add receiver node
|
2021-12-07 10:19:32 -05:00 |
|
Mike Reeves
|
9f41df641e
|
Merge pull request #6470 from Security-Onion-Solutions/hotfix/2.3.90
HOTFIX: 2.3.90-20211206
2.3.90-20211206
|
2021-12-07 09:51:01 -05:00 |
|
Mike Reeves
|
9f94ecfab7
|
Merge pull request #6466 from Security-Onion-Solutions/2390updates3
2.3.90 hotfix 20211206
|
2021-12-06 11:07:14 -05:00 |
|
Mike Reeves
|
4188282724
|
2.3.90 hotfix 20211206
|
2021-12-06 11:03:49 -05:00 |
|
Mike Reeves
|
3945933dec
|
Merge pull request #6446 from Security-Onion-Solutions/TOoSmOotH-patch-4
Update HOTFIX
|
2021-12-06 09:38:02 -05:00 |
|
Mike Reeves
|
73a1a3878f
|
Update HOTFIX
|
2021-12-06 09:37:07 -05:00 |
|
weslambert
|
ff25d6f80b
|
Merge pull request #6447 from Security-Onion-Solutions/eg_dashes
Add initial EG dashboards
|
2021-12-03 18:05:22 -05:00 |
|