Commit Graph

1279 Commits

Author SHA1 Message Date
Jason Ertel
b37d5ae15f Enable advanced setup for some search/sensor installs 2021-03-01 15:54:29 -05:00
William Wernert
def3637bf6 Revert "[refactor] Make default route message a warning"
This reverts commit be1f641bf0.
2021-03-01 09:46:28 -05:00
Mike Reeves
64cc894948 Merge pull request #3192 from Security-Onion-Solutions/bugfix/input-validation-fixes
Bugfix/input validation fixes
2021-03-01 09:27:48 -05:00
William Wernert
cf9be3521d [fix] Don't validate LS/ES heap sizes
* Also remove comments + fix indent
2021-03-01 09:17:36 -05:00
William Wernert
810ffbdaf5 Add max to MTU input validation to encompass default + jumbo frames 2021-03-01 08:41:19 -05:00
William Wernert
fd877a2256 Fix logic for configure network option in setup 2021-02-26 15:40:20 -05:00
Jason Ertel
cc15e9a0b1 Merge branch 'dev' into foxtrot 2021-02-26 14:26:48 -05:00
Jason Ertel
4a03862fc4 Add suricata distributed automations 2021-02-26 14:26:28 -05:00
William Wernert
be1f641bf0 [refactor] Make default route message a warning
Don't force users to exit setup if the default route and management NIC's IP don't match,
just warn them
2021-02-26 10:27:14 -05:00
William Wernert
333a7e6173 [fix] Change logic for collecting fleet custom hostname 2021-02-26 09:14:30 -05:00
m0duspwnens
9fa625189f upgrade to salt 3002.5 https://github.com/Security-Onion-Solutions/securityonion/issues/3147 2021-02-25 20:07:29 -05:00
Mike Reeves
e06ca75677 Merge pull request #3144 from Security-Onion-Solutions/interfaces
Don't disable NICs
2021-02-25 17:28:47 -05:00
William Wernert
b024dae72e [fix] Don't call set_main_ip a second time 2021-02-25 15:19:28 -05:00
Mike Reeves
2c8bc16c8f Remove some nmcli business 2021-02-25 13:43:02 -05:00
Mike Reeves
37c13362df Netowrk Manager needs to chill 2021-02-25 13:20:29 -05:00
Mike Reeves
51e8839daf Inverse NIC offload 2021-02-25 11:46:00 -05:00
Jason Ertel
ef7cdf27bf Add automation files for Suricata metadata 2021-02-25 07:43:11 -05:00
Mike Reeves
c39b516f38 Merge pull request #3121 from Security-Onion-Solutions/strelkainstall
Fix Strelka Rule updates, repo fix
2021-02-24 17:13:41 -05:00
Mike Reeves
701cfe7e9a Merge branch 'dev' into strelkainstall 2021-02-24 17:07:26 -05:00
William Wernert
4ae34f928c Merge branch 'dev' into kilo
# Conflicts:
#	setup/so-functions
2021-02-24 17:05:53 -05:00
Mike Reeves
ff577cdf41 Merge pull request #3079 from petiepooo/feature/eslogsize
calculate log_size_limit based on /nsm/elasticsearch
2021-02-24 17:03:35 -05:00
William Wernert
4a6ad7c87e Set MAINIP to MNIC_IP when using a VPN 2021-02-24 16:31:45 -05:00
Mike Reeves
b30f964974 Moving the wildcard 2021-02-24 16:09:37 -05:00
Mike Reeves
262bf03595 Testing capitals 2021-02-24 16:04:53 -05:00
Mike Reeves
ae17a3aeb8 Fix Syntax try 3 2021-02-24 16:02:36 -05:00
Mike Reeves
ab66f175c5 Fix Syntax 2021-02-24 16:01:18 -05:00
Mike Reeves
8f3ba7633c Fix Syntax 2021-02-24 15:57:18 -05:00
Mike Reeves
5949119cb5 Bypass route check 2021-02-24 15:53:55 -05:00
Mike Reeves
6058400aad Bypass route check 2021-02-24 15:52:50 -05:00
William Wernert
775f274962 Also check /nsm/elasticsearch in soup log_size_limit check
Reflect changes from PR#3079
2021-02-24 14:36:41 -05:00
William Wernert
298f7da90b Fix indent in set_default_log_size 2021-02-24 13:56:33 -05:00
Mike Reeves
bdfec5176d Dont disable unused interfaces during setup 2021-02-24 13:22:06 -05:00
Mike Reeves
1d45472b48 Fix Strelka Rule updates, repo fix 2021-02-24 11:30:43 -05:00
William Wernert
5a2fa26d72 Add ET OPEN/PRO URLs 2021-02-23 13:47:52 -05:00
William Wernert
61a23509a1 [fix] grep -q doesn't give output to parse, so remove the flag 2021-02-23 13:43:10 -05:00
William Wernert
25698dafe3 Add initial pre-flight check script 2021-02-23 13:25:54 -05:00
William Wernert
f2a1e89633 Merge branch 'dev' into feature/so-rules 2021-02-22 10:03:14 -05:00
Jason Ertel
7222f1faa5 fix merge issue 2021-02-20 16:41:12 -05:00
Jason Ertel
9d3c82a589 Disable unused features for import installations 2021-02-19 20:14:55 -05:00
Jason Ertel
04b3a20e22 Merge branch 'dev' into delta 2021-02-19 20:12:07 -05:00
Jason Ertel
9302b9302b Clear salt fileserver cache to ensure the new local.rules file gets picked up on the filesync 2021-02-19 11:13:31 -05:00
Mike Reeves
b4b449aa14 Pull in Suricata changes 2021-02-19 11:01:15 -05:00
William Wernert
9183c0a92c [feat] Initial so-rules script
* Quote curly braces in minion pillar, need to add sed function in soup
2021-02-19 09:24:12 -05:00
Jason Ertel
e912b2fd96 Move idstools to run after nginx runs 2021-02-18 12:50:00 -05:00
Pete
29c5f3212f make log_size_limit calculation more specific
Extend the directory traversal into /nsm/elasticsearch in case that's a separate mountpoint from /nsm/.
2021-02-17 16:53:31 +00:00
Josh Patterson
ce313d8dc4 Merge pull request #2992 from Security-Onion-Solutions/issue/2737
fix logic for log_size_limit
2021-02-17 10:09:54 -05:00
William Wernert
cda36f178b Merge pull request #2979 from Security-Onion-Solutions/foxtrot
Setup fixes/improvements
2021-02-16 17:14:59 -05:00
m0duspwnens
996bf0768b fix logic for log_size_limit https://github.com/Security-Onion-Solutions/securityonion/issues/2737 2021-02-16 15:40:01 -05:00
William Wernert
0bd5ddf6a6 Grammar + misc fixes per PR review
* Remove unnecessary `apt-get update` commands
* Change `if ! (command); then exit 1; fi` to `command || exit 1` to avoid subshell
2021-02-16 14:17:41 -05:00
William Wernert
3323e900ef [fix] Fix indent (pt 2) 2021-02-16 11:17:36 -05:00