Commit Graph

831 Commits

Author SHA1 Message Date
Wes
d0a6881c2c Add event mappings and remove meta information for now 2023-06-13 13:35:46 +00:00
Wes
57268ba934 Change priority of templates 2023-06-12 14:29:45 +00:00
Wes
1208915896 Remove Elastic Agent package templates 2023-06-12 14:24:59 +00:00
Wes
42f5ad9939 Add templates for system.auth and systen.syslog 2023-06-12 14:23:24 +00:00
weslambert
32f3ee0b01 Merge pull request #10564 from Security-Onion-Solutions/fix/elasticsearch_templates
Update templates for integrations
2023-06-12 09:05:31 -04:00
Doug Burks
b3f8ed7dcd FIX: Suricata DHCP logs not ingesting #10565 2023-06-10 11:42:41 -04:00
Wes
ad5a424c03 Update templates for integrations 2023-06-09 18:32:50 +00:00
Doug Burks
e5f76a9c6e change suricata parsers from dataset to event.dataset 2023-06-08 12:31:31 -04:00
Wes
495a9c0783 Add mapping for event.severity_label 2023-06-05 21:19:37 +00:00
weslambert
25006ed20b Merge pull request #10455 from Security-Onion-Solutions/fix/curator_cluster_delete_delete
Update so-elasticsearch-cluster-space-used and so-curator-cluster-delete-delete
2023-05-30 14:28:22 -04:00
Wes
4469a93a75 Fix typo 2023-05-30 18:24:30 +00:00
Wes
b441fe662f Change 1024 to 1000 for gigabytes 2023-05-30 17:28:59 +00:00
Wes
ce114a2601 Fix total space logic and rename TOTAL_AVAILABLE_SPACE to TOTAL_USED_SPACE 2023-05-26 13:19:45 +00:00
Wes
a308a39bbe Use disk space taken up by indices if the script is not running on a manager 2023-05-24 16:48:45 +00:00
Mike Reeves
cace817c79 Merge branch '2.4/dev' of https://github.com/Security-Onion-Solutions/securityonion into airgaps 2023-05-24 08:43:03 -04:00
weslambert
2c10ad7eec Check if 'dns.query' is null 2023-05-19 15:50:33 -04:00
Mike Reeves
5315c51197 Allow additional docker parameters 2023-05-18 16:52:38 -04:00
Mike Reeves
8917f9b9d2 Allow additional docker parameters 2023-05-18 16:46:28 -04:00
Mike Reeves
c0dc05f26a Allow additional docker parameters 2023-05-18 16:39:42 -04:00
Mike Reeves
7ab31e36af Merge branch '2.4/dev' of https://github.com/Security-Onion-Solutions/securityonion into airgaps 2023-05-18 15:19:15 -04:00
Mike Reeves
0fd9fb9294 Allow additional docker parameters 2023-05-18 15:19:09 -04:00
m0duspwnens
f4b8d385ee remove conditional on cacertz and capemz 2023-05-18 08:36:24 -04:00
m0duspwnens
2419fa43b6 cwd for catrustscript 2023-05-16 12:08:44 -04:00
m0duspwnens
2813d67670 import GLOBALS 2023-05-15 16:47:33 -04:00
m0duspwnens
c49b134122 move so-catrust 2023-05-15 16:43:47 -04:00
m0duspwnens
6320528263 move so-catrust 2023-05-15 14:08:30 -04:00
m0duspwnens
9d6fb98e3b move cacertz and capemz to ca state 2023-05-09 11:13:57 -04:00
m0duspwnens
328b714306 import ELASTICSEARCHMERGED 2023-05-09 09:51:53 -04:00
m0duspwnens
2a979197a0 enabled/disable elasticsearch in ui 2023-05-09 09:33:37 -04:00
m0duspwnens
ddb776c80e add redis pillars to searchnode. move redis scripts with jinja to sbin_jinja 2023-05-04 17:26:18 -04:00
m0duspwnens
f34627f709 source from sbin_jinja and exlude pat 2023-05-04 15:13:42 -04:00
m0duspwnens
dc77b20723 remove extra " from so-elasticsearch-roles-load 2023-05-04 14:54:37 -04:00
Mike Reeves
d0cfaaeb26 Fix some errors 2023-05-04 13:28:11 -04:00
Mike Reeves
2419cf86ee Fix some files 2023-05-02 12:41:49 -04:00
Mike Reeves
7595072e85 Fix some files 2023-05-02 12:15:05 -04:00
Mike Reeves
e60e21d9ff Move files out of common 2023-05-02 09:40:02 -04:00
Mike Reeves
2d4f4791e0 Move files out of common 2023-05-01 15:21:31 -04:00
Mike Reeves
3d7f2bc691 Fix annotations and file locations 2023-04-27 13:23:53 -04:00
Doug Burks
a67cbb3276 FIX: Suricata DNS A and CNAME parsing #10117 2023-04-13 10:56:17 -04:00
Wes
8d0074c712 Only load pipelines and tempaltes if the node role is not 'so-searchnode' 2023-04-11 14:15:21 +00:00
Doug Burks
a8b6470a14 Update limited-auditor.json 2023-03-31 09:22:42 -04:00
Doug Burks
e945f1c38f Update limited-analyst.json 2023-03-31 09:22:28 -04:00
Doug Burks
d0dff9572d Update auditor.json 2023-03-31 09:22:15 -04:00
Doug Burks
68e8c159ce Update analyst.json 2023-03-31 09:21:59 -04:00
weslambert
de902ebd02 Merge pull request #10024 from Security-Onion-Solutions/esspace
Manage disk-based index deletion via so-curator-cluster-delete
2023-03-28 12:25:19 -04:00
Jason Ertel
44c696a495 Merge pull request #10036 from Security-Onion-Solutions/commonprofile
ensure scripts are run as root, have copyright, and path is correct
2023-03-28 11:59:10 -04:00
Jason Ertel
4efe22efb3 Update so-elasticsearch-cluster-settings 2023-03-28 11:57:41 -04:00
Jason Ertel
591129b98c Update so-elasticsearch-pipelines 2023-03-28 11:57:22 -04:00
Jason Ertel
60d770411a Update so-elasticsearch-roles-load 2023-03-28 11:57:07 -04:00
Jason Ertel
5f49a120de Update so-elasticsearch-templates-load 2023-03-28 11:56:51 -04:00