Corey Ogburn
d6af3aab6d
Use a wildcard instead of making 2 requests
2024-07-25 14:05:09 -06:00
Corey Ogburn
0cb067f6f2
Don't forget history
...
Also update so-detectionhistory to have a refresh_interval of 1s.
2024-07-25 14:01:10 -06:00
Corey Ogburn
ccf88fa62b
Add step to soup to set refresh_interval during upgrade
...
The so-detection index needs it's refresh_interval reset during an upgrade. If the index doesn't exist, the config change will set it correctly when it is created.
2024-07-25 13:44:22 -06:00
reyesj2
4478d7b55a
kafka soup pillar fix
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-07-19 09:32:47 -04:00
reyesj2
03ca7977a0
quote variables
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-07-16 14:14:55 -04:00
reyesj2
542a116b8c
use so-yaml add for kafka pillar change
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-07-15 16:26:52 -04:00
reyesj2
4182ff66a0
rearrange kafka pillar, declutters SOC ui
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-07-11 16:37:16 -04:00
reyesj2
d791b23838
Generate new Kafka truststore
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-07-10 11:29:09 -04:00
Mike Reeves
40b7999786
Delete salt/manager/tools/sbin/so-user-list
2024-07-02 14:36:51 -04:00
Mike Reeves
69be03f86a
Delete salt/manager/tools/sbin/so-user-enable
2024-07-02 14:36:36 -04:00
Mike Reeves
8dc8092241
Delete salt/manager/tools/sbin/so-user-disable
2024-07-02 14:36:02 -04:00
Mike Reeves
578c6c567f
Delete old user commands
2024-07-02 14:34:45 -04:00
m0duspwnens
cfcfc6819f
disable logstash in heavynode pillars
2024-06-26 12:53:32 -04:00
m0duspwnens
fe4e2a9540
Merge remote-tracking branch 'origin/2.4/dev' into issue/13073
2024-06-26 12:46:01 -04:00
m0duspwnens
dfd5e95c93
start soup 2.4.90
2024-06-26 12:37:28 -04:00
m0duspwnens
50f0c43212
merge dev
2024-06-26 12:33:32 -04:00
reyesj2
680e84851b
Re-add manager sbin_jinja file recurse
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-24 12:27:52 -04:00
Mike Reeves
9577c3f59d
Make soup use reposync from the repo
2024-06-21 15:24:54 -04:00
Mike Reeves
77dedc575e
Make soup use reposync from the repo
2024-06-21 15:20:07 -04:00
Mike Reeves
0295b8d658
Make soup use reposync from the repo
2024-06-21 15:11:23 -04:00
Mike Reeves
b84521cdd2
Make soup use reposync from the repo
2024-06-21 14:49:16 -04:00
Mike Reeves
ff4679ec08
Make soup use reposync from the repo
2024-06-21 14:45:06 -04:00
Mike Reeves
c5ce7102e8
Make soup use reposync from the repo
2024-06-21 14:41:27 -04:00
Mike Reeves
70c001e22b
Update so-repo-sync
2024-06-21 13:37:36 -04:00
Mike Reeves
aae1b69093
Update soc_manager.yaml
2024-06-21 12:35:01 -04:00
reyesj2
911d6dcce1
update kafka output policy only on eligible grid types
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-18 12:09:59 -04:00
reyesj2
2afc947d6c
suppress fleet policy update in soup
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-17 14:12:33 -04:00
reyesj2
4d1f2c2bc1
fix kafka elastic fleet output policy setup
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-14 23:04:08 -04:00
reyesj2
2bc53f9868
Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka
2024-06-12 12:36:58 -04:00
m0duspwnens
8f8698fd02
Merge remote-tracking branch 'origin/2.4/dev' into issue/13073
2024-06-12 10:50:18 -04:00
Josh Patterson
092f716f12
Merge pull request #13189 from Security-Onion-Solutions/soupmsgq
...
remove this \n
2024-06-12 10:41:49 -04:00
m0duspwnens
c38f48c7f2
remove this \n
2024-06-12 10:34:32 -04:00
m0duspwnens
98837bc379
this method does not cause soup to fail
2024-06-12 09:11:02 -04:00
m0duspwnens
88fc1bbe32
quotes on vars
2024-06-11 16:32:57 -04:00
m0duspwnens
2ecac38f6d
disable logstash on heavynodes
2024-06-11 13:50:29 -04:00
reyesj2
628893fd5b
remove redundant 'kafka_' from annotations & defaults
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-11 11:56:21 -04:00
reyesj2
824f852ed7
merge 2.4/dev
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-06-10 11:26:23 -04:00
Jason Ertel
f1638faa3a
correct placement of error check override
2024-06-08 08:18:34 -04:00
Jason Ertel
dea786abfa
Merge pull request #13170 from Security-Onion-Solutions/jertel/yaml
...
gracefully handle missing parent key
2024-06-08 07:49:49 -04:00
Jason Ertel
f96b82b112
gracefully handle missing parent key
2024-06-08 07:44:46 -04:00
Josh Patterson
95fe11c6b4
Merge pull request #13162 from Security-Onion-Solutions/soupmsgq
...
fix elastic templates not loading due to global_override phases
2024-06-07 16:23:03 -04:00
Jason Ertel
f2f688b9b8
Update soup
2024-06-07 16:18:09 -04:00
m0duspwnens
0139e18271
additional description
2024-06-07 16:03:21 -04:00
Corey Ogburn
5d3fd3d389
AdditionalCA and InsecureSkipVerify
...
New fields have been added to manager and then duplicated over to SOC's config in the same vein as how proxy was updated earlier this week.
AdditionalCA holds the PEM formatted public keys that should be trusted when making requests. It has been implemented for both Sigma's zip downloads and Sigma and Suricata's repository clones and pulls.
InsecureSkipVerify has been added to help our users troubleshoot their configuration. Setting it to true will not verify the cert on outgoing requests. Self signed, missing, or invalid certs will not throw an error.
2024-06-07 12:47:09 -06:00
m0duspwnens
f5cc35509b
fix output alignment
2024-06-07 11:03:26 -04:00
m0duspwnens
d39c8fae54
format output
2024-06-07 09:01:16 -04:00
m0duspwnens
d3b81babec
check for phases with so-yaml, remove if exists
2024-06-06 16:15:21 -04:00
m0duspwnens
a39c88c7b4
add set to troubleshoot failure
2024-06-06 12:56:24 -04:00
m0duspwnens
73ebf5256a
Merge remote-tracking branch 'origin/2.4/dev' into soupmsgq
2024-06-06 12:44:45 -04:00
Jason Ertel
5600fed9c4
add ability to retrieve yaml values via so-yaml.py; improve so-minion id matching
2024-06-06 11:56:07 -04:00
