Commit Graph

54 Commits

Author SHA1 Message Date
Wes Lambert
8275f458a1 Fix module eval 2020-07-16 13:30:38 +00:00
m0duspwnens
57bf23d83c move templates from logstash to elasticsearch 2020-07-14 16:07:46 -04:00
Josh Brower
e62381e998 Merge pull request #982 from Security-Onion-Solutions/bugfix/alerting
Misc fixes
2020-07-10 19:50:27 -04:00
Josh Brower
65062d93f4 Misc fixes 2020-07-10 19:43:43 -04:00
m0duspwnens
13af4cacb0 merge with dev and resolve conflicts 2020-07-10 16:27:10 -04:00
Mike Reeves
5eb33d5ac7 Logstash Import and Template Assignment 2020-07-10 13:53:55 -04:00
m0duspwnens
24b8f81e38 merge with dev and resolve conflicts 2020-07-10 12:20:14 -04:00
Mike Reeves
3706aa76d8 Add jinja extension 2020-07-10 10:35:31 -04:00
Mike Reeves
1a6c4c12b4 Fix elasticsearch yaml 2020-07-09 21:56:32 -04:00
Mike Reeves
6094d19b0b Make hot default 2020-07-09 16:54:31 -04:00
Mike Reeves
96bcf9d9f3 Add temaplte files per index 2020-07-09 11:51:55 -04:00
m0duspwnens
3cf31e2460 https://github.com/Security-Onion-Solutions/securityonion/issues/404 2020-07-09 11:27:06 -04:00
Mike Reeves
9c2f7d574d Add ES settings to pillar 2020-07-09 11:19:02 -04:00
Mike Reeves
cdce804c9f Update 9700_output_strelka.conf.jinja 2020-07-07 17:36:49 -04:00
Mike Reeves
eccfaf94fb Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/937 2020-07-07 15:10:12 -04:00
Jason Ertel
f4f189cc50 correct capitalization of true 2020-07-07 14:28:11 -04:00
Mike Reeves
ec89ab39ac Update 9999_output_redis.conf.jinja 2020-07-07 11:56:45 -04:00
Mike Reeves
c59096d9bd rename node pillar to elasticsearch 2020-07-07 10:42:12 -04:00
Mike Reeves
ab42126d8e Add logstash_settings pillar 2020-07-01 15:25:35 -04:00
Mike Reeves
f580da5d56 Update 9999_output_redis.conf.jinja 2020-07-01 14:45:54 -04:00
Mike Reeves
70e4ce3e98 Add batch to output 2020-07-01 14:38:51 -04:00
Wes Lambert
f3c9f2e5ea update templates 2020-06-15 16:57:46 +00:00
Josh Brower
4e4eeedb41 Initial support - external beats 2020-06-04 22:41:35 -04:00
Wes Lambert
8cac30728b update Logstash config 2020-06-02 17:36:36 +00:00
m0duspwnens
2db2054cce update instructions in logstash customer pipelines and templates - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/749 2020-05-29 10:58:53 -04:00
Wes Lambert
f0662eed48 remark Beat tag for now 2020-05-16 14:59:41 +00:00
Wes Lambert
7765d9a038 update common template 2020-04-05 20:40:30 +00:00
Josh Brower
513419ce2f template + nginx config 2020-04-02 20:16:21 -04:00
Wes Lambert
09022ad752 Update Zeek and Strelka 2020-04-01 19:11:10 +00:00
Wes Lambert
1df2302287 Update Zeek and Strelka 2020-04-01 19:09:38 +00:00
weslambert
82c99edbfc Update Suricata output 2020-04-01 15:02:52 -04:00
weslambert
e1008269ce Update OSSEC output 2020-04-01 15:00:52 -04:00
Josh Brower
5ca9a643a8 Merge branch 'dev' into feature/osquery-ingest 2020-04-01 10:19:35 -04:00
Josh Brower
0e76447d11 osquery ingest - initial support 2020-04-01 10:17:36 -04:00
Wes Lambert
33512eca2a template and kibana config updates 2020-04-01 13:14:13 +00:00
weslambert
ece7e139f2 Add message 2020-03-23 23:39:15 -04:00
Wes Lambert
7a71a2c459 removing mapping types 2020-03-18 20:17:57 +00:00
Wes Lambert
5072095eeb removing mapping types 2020-03-18 20:15:10 +00:00
Wes Lambert
fcc5c306ea fix index names 2020-03-18 16:42:06 +00:00
Wes Lambert
29a4932785 fix strelka pattern 2020-03-18 13:47:22 +00:00
Wes Lambert
70f109af86 elastic changes 2020-03-17 21:29:28 +00:00
Wes Lambert
5ed3dbff39 Fix template name 2020-03-17 15:15:01 +00:00
Wes Lambert
d48c2723ba modify default templates 2020-03-14 12:02:52 +00:00
Wes Lambert
9fb3a47358 modify default templates 2020-03-14 12:02:42 +00:00
Wes Lambert
f9e4d218ec update config 2020-03-11 12:13:11 +00:00
Wes Lambert
70e78a0642 add renamed templates 2020-03-11 12:12:32 +00:00
weslambert
14dfec5365 Change to bro template 2020-03-09 09:18:57 -04:00
Wes Lambert
bbebc4fc9b Add src/dst objects and Bro template 2020-03-02 20:02:39 +00:00
Wes Lambert
9eb5a9be3a Begin switch to ECS for Suricata 2020-03-02 19:07:40 +00:00
m0duspwnens
54e4c40c2a logstash cleanup and conflict resolution - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/326 2020-02-26 10:26:50 -05:00