10151 Commits

Author	SHA1	Message	Date
DefensiveDepth	726df310ee	Add context	2024-08-26 16:15:56 -04:00
DefensiveDepth	b952728b2c	Fix policy load	2024-08-26 15:57:21 -04:00
weslambert	1cac2ff1d4	Merge pull request #13554 from Security-Onion-Solutions/fix/ilm_soc_logs ... FIX: Add so-soc-logs	2024-08-26 12:54:03 -04:00
weslambert	a93c77a1cc	Merge pull request #13548 from Security-Onion-Solutions/fix/global_custom ... Use global@custom from common pipeline	2024-08-26 10:42:12 -04:00
weslambert	dd09f5b153	Add so-soc-logs	2024-08-26 10:32:27 -04:00
Josh Patterson	4c10282f40	add es version to annotation	2024-08-26 09:37:19 -04:00
DefensiveDepth	c575e02fbb	Use correct name	2024-08-23 13:52:20 -04:00
weslambert	e96a0108c3	Add global@custom	2024-08-23 13:05:34 -04:00
DefensiveDepth	e86fce692c	Merge remote-tracking branch 'origin/2.4/dev' into 2.4/soupchanges	2024-08-23 11:44:39 -04:00
DefensiveDepth	8d35c7c139	Merge branch '2.4/soupchanges' of https://github.com/Security-Onion-Solutions/securityonion into 2.4/soupchanges	2024-08-23 11:37:16 -04:00
DefensiveDepth	0a5725a62e	Refactor for Elastic Upgrade	2024-08-23 11:36:47 -04:00
Jorge Reyes	1c6f5126db	Merge pull request #13546 from Security-Onion-Solutions/reyesj2/kfano ... set kafka.id in common ingest pipeline	2024-08-23 09:50:08 -04:00
reyesj2	1ec5e3bf2a	add kafka.id to common ingest pipeline ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-08-23 09:47:21 -04:00
Jason Ertel	d29727c869	Merge pull request #13540 from Security-Onion-Solutions/jertel/an2 ... exclude all logstash errors related to license manager init log line	2024-08-22 18:17:23 -04:00
Jason Ertel	eabb894580	exclude all logstash errors related to license manager init log line	2024-08-22 17:52:37 -04:00
weslambert	d7e3e134a5	Check Elasticsearch for template	2024-08-22 10:33:13 -04:00
Jason Ertel	dfb0ff7a98	Merge pull request #13535 from Security-Onion-Solutions/jertel/an2 ... notification updates	2024-08-22 09:19:43 -04:00
Jason Ertel	48f1e24bf5	notification updates	2024-08-22 09:04:43 -04:00
Jason Ertel	cf47508185	notification updates	2024-08-22 09:02:32 -04:00
weslambert	2a024039bf	Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm ... Create detections.alerts ILM policy with corresponding name	2024-08-21 14:50:10 -04:00
weslambert	212cc478de	Change back to so	2024-08-21 14:39:24 -04:00
weslambert	88ea60df2a	Fix name	2024-08-21 14:38:57 -04:00
weslambert	c1b7232a88	Fix for detections-alerts	2024-08-21 14:38:29 -04:00
Mike Reeves	04577a48be	Merge pull request #13530 from Security-Onion-Solutions/raidtools	2024-08-21 14:33:40 -04:00
weslambert	4108e67178	Check for endpoint package	2024-08-21 14:22:28 -04:00
Mike Reeves	ff479de7bd	Add support for new appliance raid controllers	2024-08-21 14:10:24 -04:00
weslambert	4afac201b9	Change ILM policy name	2024-08-21 13:25:26 -04:00
weslambert	c30537fe6a	Ensure endpoint is installed	2024-08-21 13:00:04 -04:00
m0duspwnens	7fbf448b22	fail if no defaults file	2024-08-21 11:36:06 -04:00
m0duspwnens	cd9c9a25d3	reference elastic versions from defaults	2024-08-21 11:25:56 -04:00
m0duspwnens	da1671fdf1	add get_elastic_agent_vars function	2024-08-21 11:25:33 -04:00
weslambert	1ed73b6f8e	Merge pull request #13526 from Security-Onion-Solutions/feature/tenable_io ... Add Tenable IO	2024-08-21 09:03:33 -04:00
m0duspwnens	3d61897522	ref es version from defaults for kibana	2024-08-21 08:51:35 -04:00
DefensiveDepth	f01825166d	Update Fleet Server policy	2024-08-21 08:31:37 -04:00
DefensiveDepth	07f8bda27e	Update agent	2024-08-20 15:23:31 -04:00
DefensiveDepth	e3ecc9d4be	Directly manage the Fleet Server integration config	2024-08-20 15:06:16 -04:00
DefensiveDepth	ca209ed54c	Disable auto-upgrade	2024-08-20 09:14:08 -04:00
DefensiveDepth	df6ff027b5	Remove unneeded elastic upgrade config	2024-08-19 16:05:27 -04:00
weslambert	205bbd9c61	Use more specific match	2024-08-16 14:31:11 -04:00
weslambert	224bc6b429	Ignore old SOC logs before licenseStatus	2024-08-16 14:15:10 -04:00
weslambert	dc197f6a5c	Add tenable settings	2024-08-15 23:06:53 -04:00
weslambert	f182833a8d	Add tenable_io	2024-08-15 23:03:32 -04:00
weslambert	61ab1f1ef2	Add tenable_io templates	2024-08-15 23:03:07 -04:00
DefensiveDepth	b860bf753a	Add influxdb known error	2024-08-15 11:50:34 -04:00
Mike Reeves	a39ad55578	Update registry version	2024-08-15 09:34:20 -04:00
weslambert	5f74b1b730	Update column number because of changes to API	2024-08-15 08:26:56 -04:00
Doug Burks	ab63d5dbdb	Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API	2024-08-15 08:01:22 -04:00
Josh Patterson	f233f13637	Merge pull request #13478 from Security-Onion-Solutions/fixsurivars ... handle suricata network and port vars as string or list	2024-08-13 15:52:11 -04:00
m0duspwnens	c8a8236401	handle suricata network and port vars as string or list	2024-08-13 15:44:08 -04:00
Jason Ertel	dd2926201d	Merge pull request #13470 from Security-Onion-Solutions/jertel/chgpw ... fix issue with reset pw and mfa	2024-08-12 17:29:50 -04:00