2417 Commits

Author	SHA1	Message	Date
Jason Ertel	cd28c00d67	auto-convert email addresses to lowercase during setup	2024-03-11 13:47:31 -04:00
Jason Ertel	b5d8df7fb2	auto-convert email addresses to lowercase during setup	2024-03-11 13:45:57 -04:00
Mike Reeves	9a413a2e31	Fix location of repo	2024-03-06 12:42:22 -05:00
Mike Reeves	1fe8f3d9e4	Merge pull request #12405 from Security-Onion-Solutions/repochange ... Manage the repo files	2024-02-29 14:01:48 -05:00
Josh Brower	c6baa4be1b	Airgap Support - Detections module	2024-02-26 16:19:32 -05:00
Mike Reeves	9ca0f586ae	Manage the repos	2024-02-21 11:45:02 -05:00
Mike Reeves	2db5f4dd41	Merge pull request #12308 from petiepooo/feat-es-ownfs ... FEATURE: Check for mountpoint during Elastic size limit calculations	2024-02-12 16:03:36 -05:00
Mike Reeves	f91cb5b81f	Merge pull request #12290 from petiepooo/fix-remove-intca-symlink ... fix: also remove intca symlink	2024-02-12 12:33:13 -05:00
Pete	cf83d1cb86	feat: use mountpoint for Elastic log limit ... Instead of just existence, this checks if the directories are separate mountpoints when determining disk size and log_size_limit calculations. It also sets the percentage to 80 if /nsm/elasticsearch is a separate mountpoint. This allows for better disk utilization on server configurations where /nsm is based on large slow HDDs for increased PCAP retention but /nsm/elasticsearch is based on SSDs for faster Elasticsearch performance.	2024-02-02 12:25:16 -05:00
Pete	7a29b3a529	call salt before stopping salt services ... salt-call does not work when the salt-master is not running. If these calls are to succeed, they should occur before the salt services are stopped.	2024-02-02 08:45:01 -05:00
Mike Reeves	341ff5b564	Update so-functions	2024-01-31 16:18:51 -05:00
reyesj2	a73d78300a	Add initial stig state ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-01-15 21:17:17 -05:00
weslambert	5e1e685ce0	Exclude Cisco failed_attempts pipeline	2024-01-11 10:52:30 -05:00
Josh Brower	9159eab9fd	Merge pull request #12151 from Security-Onion-Solutions/fix/so-playbook-reset ... Fix reinstall & reset stability	2024-01-10 14:23:53 -05:00
Mike Reeves	fc2f02c0a0	Update so-functions	2024-01-10 14:19:47 -05:00
Mike Reeves	1e3a00a833	Update so-functions	2024-01-10 14:16:55 -05:00
Josh Brower	6ff764e6a1	refactor for reinstall stability	2024-01-10 10:22:50 -05:00
m0duspwnens	ccfdafea0a	enable startup_states: highstate on managers during setup and not with salt	2024-01-04 16:24:48 -05:00
m0duspwnens	7b9ac7ae6d	remove checkin_at_boot function	2023-12-19 14:05:19 -05:00
m0duspwnens	b3be999aea	dont enable startup_states during setup. use salt to add it	2023-12-19 09:00:32 -05:00
Jason Ertel	997d323763	more log false alarms	2023-12-14 08:55:18 -05:00
Wes	bbe091fa14	Fix accidental change	2023-12-12 15:08:47 +00:00
Wes	d203aec44a	Remove Curator	2023-12-08 19:37:06 +00:00
Jason Ertel	e71ee97717	ignore libwbclient upgrade warning	2023-11-19 19:03:23 -05:00
Jason Ertel	32079a7bce	Merge pull request #11734 from Security-Onion-Solutions/fix/elastic_scripts ... Improve error handling and add retry logic	2023-11-08 12:19:00 -05:00
Jason Ertel	3701c1d847	ignore retry logging	2023-11-08 11:50:56 -05:00
Jason Ertel	b99c7ce76e	improve verbosity of setup logs	2023-11-06 11:22:35 -05:00
Josh Brower	0dec6693dc	Merge pull request #11678 from Security-Onion-Solutions/2.4/fleetreset ... Add Elastic Fleet reset script	2023-11-02 11:33:58 -04:00
Josh Brower	2c0e287f8c	Fix name	2023-11-02 10:34:24 -04:00
Josh Brower	5388b92865	Refactor & cleanup	2023-11-02 10:20:32 -04:00
Jason Ertel	1d2518310d	more log bypass	2023-11-02 09:59:45 -04:00
Jason Ertel	c8d8997119	adjust log filter to include all hosts	2023-11-02 09:21:57 -04:00
Mike Reeves	e6a0838e4c	Add memory restrictions	2023-11-01 15:26:24 -04:00
Mike Reeves	cc93976db9	Add memory restrictions	2023-11-01 15:17:23 -04:00
Mike Reeves	b3b67acf07	Add memory restrictions	2023-11-01 15:11:54 -04:00
Mike Reeves	d07cfdd3fe	Update so-functions	2023-10-31 13:10:55 -04:00
m0duspwnens	6891a95254	remove wait_for_salt_minion from so-functions	2023-10-26 13:02:39 -04:00
m0duspwnens	a3e6b1ee1d	change generate_ssl wait_for_salt_minion	2023-10-25 09:26:36 -04:00
m0duspwnens	752390be2e	merge with dev, fix confict	2023-10-24 09:40:09 -04:00
m0duspwnens	ef2b89f5bf	fix attempts logic	2023-10-20 13:40:40 -04:00
m0duspwnens	dfcbbfd157	update call to wait_for_salt_minion with new options in so-functions	2023-10-19 15:58:50 -04:00
m0duspwnens	c5610edd83	handle salt for r9 and c9	2023-10-19 11:12:20 -04:00
m0duspwnens	9eb682bc40	generate_ca after salt-master and salt-minion states run	2023-10-18 18:37:35 -04:00
m0duspwnens	a52ee063e5	use generate_ca and generate_ssl functions and move them up	2023-10-18 16:35:33 -04:00
m0duspwnens	1999db0bb3	apply ca state early in setup	2023-10-18 15:02:22 -04:00
m0duspwnens	53fcafea50	redo how we check if salt-master is ready and accessible	2023-10-16 16:31:43 -04:00
m0duspwnens	a637b0e61b	apply salt.master and minion state early in setup to prevent the services from restarting later in setup	2023-10-16 14:58:58 -04:00
Jason Ertel	49a651fd72	adjust var name	2023-10-12 15:43:22 -04:00
Jason Ertel	17ae9b3349	avoid reboot during testing	2023-10-12 13:54:07 -04:00
m0duspwnens	05da5c039c	Merge remote-tracking branch 'origin/2.4/dev' into minechanges	2023-10-10 11:02:19 -04:00