Corey Ogburn
|
d99857002d
|
Improved Label
The underlying field is called "rulesetName" but for playbook repos we're not talking about rulesets. Improved the label for user experience.
|
2025-08-22 13:18:22 -06:00 |
|
Corey Ogburn
|
2a6c74917e
|
Ruleset Name UiElement
Add a missing UiElement so all the repo fields are represented in the UI.
|
2025-08-22 13:00:17 -06:00 |
|
Josh Patterson
|
65e7e56fbe
|
Merge pull request #14950 from Security-Onion-Solutions/180soup
180 soup base
|
2025-08-21 09:50:53 -04:00 |
|
Josh Patterson
|
424fdff934
|
180 soup base
|
2025-08-21 09:43:30 -04:00 |
|
reyesj2
|
d77556c672
|
pcap dir
|
2025-08-21 08:25:48 -05:00 |
|
reyesj2
|
f7a1a3a172
|
gui / nongui profile
|
2025-08-15 16:07:54 -05:00 |
|
reyesj2
|
292e1ad782
|
use chrony system default
|
2025-08-15 15:19:31 -05:00 |
|
reyesj2
|
af1fe86586
|
update chrony config
|
2025-08-15 15:16:36 -05:00 |
|
reyesj2
|
f09eff530e
|
profile upd
|
2025-08-14 15:17:01 -05:00 |
|
reyesj2
|
50b34a116a
|
disable rpm verify hash, salt packages are modified before install for salt bootstrap process
|
2025-08-14 15:02:59 -05:00 |
|
reyesj2
|
42874fb0d0
|
Merge remote-tracking branch 'origin/2.4/dev' into reyesj2/ol9stg
|
2025-08-13 12:50:24 -05:00 |
|
reyesj2
|
a19b99268d
|
don't create unused zeek home directory
|
2025-08-12 15:44:50 -05:00 |
|
reyesj2
|
3c5a03d7b6
|
fix /nsm/pcap no group/user ownership
|
2025-08-12 15:35:30 -05:00 |
|
reyesj2
|
c1a5c2b2d1
|
set elasticfleet aritifact registry artifact file permissions
|
2025-08-12 14:39:35 -05:00 |
|
Josh Patterson
|
baf0f7ba95
|
firewall allow hypervisor for managersearch and standalone
|
2025-08-12 14:08:15 -04:00 |
|
Josh Patterson
|
c5db0a7195
|
more ed25519 to ecdsa
|
2025-08-07 15:02:45 -04:00 |
|
Josh Patterson
|
82894d88b6
|
ecdsa instead of ed25519
|
2025-08-07 14:40:58 -04:00 |
|
reyesj2
|
4a4146f515
|
ol9 profile update
|
2025-08-05 13:02:44 -05:00 |
|
Josh Patterson
|
453c32df0d
|
handle - in hypervisor hostname
|
2025-08-04 15:25:26 -04:00 |
|
Josh Patterson
|
9d96a11753
|
update usage
|
2025-08-01 08:55:38 -04:00 |
|
Josh Patterson
|
e9e3252bb5
|
nvme script move nsm if mounted
|
2025-08-01 08:53:45 -04:00 |
|
Josh Patterson
|
930c8147e7
|
simplify cpu and memory regex
|
2025-08-01 08:52:21 -04:00 |
|
Josh Patterson
|
02299a6742
|
Merge remote-tracking branch 'origin/2.4/dev' into vlb2
|
2025-07-30 16:37:27 -04:00 |
|
Josh Patterson
|
15cbc626c4
|
resolve for already configured RAID
|
2025-07-30 16:37:19 -04:00 |
|
Josh Patterson
|
ebfb670f6a
|
Merge pull request #14892 from Security-Onion-Solutions/vlb2
match user soqemussh, allow user additions to persist, for ssh config.
|
2025-07-30 09:55:56 -04:00 |
|
Josh Patterson
|
c98042fa80
|
match user soqemussh for ssh config. allow for user edits to not be overwritten in ssh config.
|
2025-07-30 09:44:58 -04:00 |
|
Jorge Reyes
|
70181e3e08
|
Merge pull request #14890 from Security-Onion-Solutions/reyesj2-backup-script
exclude so_agent_installer dir from config backups
|
2025-07-29 15:43:12 -05:00 |
|
reyesj2
|
adb1e01c7a
|
exclude so_agent_installer dir from config backups
|
2025-07-29 15:31:53 -05:00 |
|
Jorge Reyes
|
cdb7f0602c
|
Merge pull request #14889 from Security-Onion-Solutions/reyesj2-es-helper
only show data nodes in disk usage output
|
2025-07-29 14:45:30 -05:00 |
|
reyesj2
|
07305d8799
|
only show data nodes in disk usage output
|
2025-07-29 14:15:43 -05:00 |
|
reyesj2
|
fbf5bafae7
|
set 2m timeout
|
2025-07-28 15:17:04 -05:00 |
|
reyesj2
|
d49cd3cb85
|
increased timeout for so-elasticsearch-roles-load from default of 30s
|
2025-07-28 15:14:12 -05:00 |
|
reyesj2
|
84b38daf62
|
name destination_geo & source_geo to destination.as and source.as better aligning with ECS and linking other log sources already using .as for ASN geo data.
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2025-07-25 16:17:22 -05:00 |
|
reyesj2
|
e8c25d157f
|
drop empty ip fields when its a opencanary startup log (1001) to prevent elasticsearch doc ingest error
|
2025-07-23 15:52:50 -05:00 |
|
Jorge Reyes
|
214f4f0f0c
|
Merge pull request #14870 from Security-Onion-Solutions/foxtrot
8.18.4
|
2025-07-23 10:03:14 -05:00 |
|
reyesj2
|
2e5682f11c
|
8.18.4 import evtx pipelines
|
2025-07-23 09:53:04 -05:00 |
|
Josh Patterson
|
2e7cb0e362
|
Merge pull request #14869 from Security-Onion-Solutions/saltuproc
add pack only holding package if installed. remove redundant hold on salt-master package
|
2025-07-23 10:22:21 -04:00 |
|
Josh Patterson
|
56748ea6e7
|
add pack only holding package if installed. remove redundant hold on salt-master package
|
2025-07-23 10:16:12 -04:00 |
|
reyesj2
|
621f03994c
|
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into foxtrot
|
2025-07-23 08:46:42 -05:00 |
|
Jorge Reyes
|
ab8ad72920
|
Merge pull request #14868 from Security-Onion-Solutions/reyesj2-patch-1
add some retry to so-elastic-fleet-integration-upgrade
|
2025-07-23 08:25:10 -05:00 |
|
reyesj2
|
3fc244ee85
|
8.18.4
|
2025-07-22 16:56:51 -05:00 |
|
reyesj2
|
4728b96c51
|
add a retry to so-elastic-fleet-integration-upgrade when response isn't what was expected that way the error message isn't throwin into sosetup / soup log
|
2025-07-22 16:16:28 -05:00 |
|
Doug Burks
|
2a166af524
|
UPGRADE: Zeek Ethercat plugin #14783
|
2025-07-22 16:10:44 -04:00 |
|
Josh Patterson
|
af49a8e4ef
|
add back comment
|
2025-07-22 13:22:50 -04:00 |
|
Josh Patterson
|
669d219fdc
|
splay highstate schedule 2minutes for non managers
|
2025-07-22 11:52:50 -04:00 |
|
Josh Patterson
|
442aecb9f4
|
bootstrap dont start daemon, use state to start it
|
2025-07-22 10:30:59 -04:00 |
|
Josh Patterson
|
beda0bc89c
|
new state name. no longer need to close stdin, stderr stdout
|
2025-07-21 15:40:36 -04:00 |
|
Josh Patterson
|
64fd6bf979
|
Merge remote-tracking branch 'origin/2.4/dev' into saltuproc
|
2025-07-21 14:42:07 -04:00 |
|
Mike Reeves
|
1955434416
|
Merge pull request #14860 from Security-Onion-Solutions/ja4
Add JA4 support
|
2025-07-21 11:54:52 -04:00 |
|
Mike Reeves
|
eabca5df18
|
Update defaults.yaml
|
2025-07-21 11:01:33 -04:00 |
|