54 Commits

Author	SHA1	Message	Date
Wes	e831354401	Add Suricata alerts setting for configuration	2024-05-30 17:00:11 +00:00
weslambert	d606f259d1	Add detection alerts	2024-05-13 14:25:11 -04:00
weslambert	fe2edeb2fb	30d to 60d	2024-05-01 11:01:59 -04:00
Doug Burks	4d6124f982	FIX: Elasticsearch min_age regex #12885	2024-04-30 10:18:34 -04:00
m0duspwnens	d50de804a8	update annotation	2024-04-25 09:04:34 -04:00
m0duspwnens	c9d9979f22	allow for enabled/disable of so-elasticsearch-indices-delete cronjob	2024-04-24 16:18:45 -04:00
weslambert	1b3a0a3de8	Remove hot max_age	2024-04-24 10:11:02 -04:00
weslambert	75b5e16696	Update description, type, and regex	2024-04-24 09:14:39 -04:00
weslambert	8a0a435700	Fix warm description	2024-04-24 08:35:19 -04:00
weslambert	691b02a15e	Fix warm description	2024-04-23 10:40:09 -04:00
reyesj2	55cf90f477	merge 2.4/dev ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-04-11 14:44:59 -04:00
Wes	105eadf111	Add cef	2024-04-03 14:40:41 +00:00
reyesj2	000d15a53c	Kismet integration: TODO Elasticsearch mappings ... Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>	2024-03-29 13:56:01 -04:00
m0duspwnens	162785575c	nest under policy	2024-02-21 15:28:24 -05:00
Wes	182667bafb	Change numbers for Elasticsearch	2024-02-01 13:59:23 +00:00
Wes	bc502cc065	Custom Elasticserach pipeline annotations	2024-01-31 21:46:33 +00:00
Wes	7118cc8dee	Add additional integration SOC configuration	2024-01-19 22:04:07 +00:00
weslambert	252c51dafb	Change order of names	2024-01-12 16:45:18 -05:00
weslambert	a07e6e1058	OTX pulses	2024-01-12 16:43:33 -05:00
Wes	418f41c7e4	Add SOC configuration for metrics	2024-01-12 15:03:18 +00:00
Wes	c89d674a92	Add settings for integrations	2024-01-11 14:18:06 +00:00
weslambert	8cf5d9c1a6	Annotations	2023-12-13 11:55:40 -05:00
Doug Burks	ab0e6f9bec	update broken help links in SOC Config	2023-12-06 14:35:51 -05:00
Mike Reeves	3d8663db66	Update soc_elasticsearch.yaml	2023-11-03 11:29:45 -04:00
Mike Reeves	25f1a0251f	Annotation changes for warm node	2023-10-27 09:08:07 -04:00
Mike Reeves	87494f64c7	Annotation changes for warm node	2023-10-27 09:06:12 -04:00
Mike Reeves	ce1858fe05	Annotation changes for warm node	2023-10-27 09:02:39 -04:00
Mike Reeves	9fc3a73035	Annotation changes for warm node	2023-10-27 08:58:08 -04:00
Mike Reeves	01810a782c	Annotation changes for warm node	2023-10-25 16:46:30 -04:00
Mike Reeves	6d6292714f	Annotation changes for warm node	2023-10-25 16:21:47 -04:00
Mike Reeves	88fb7d06e6	Annotation changes for warm node	2023-10-25 16:20:28 -04:00
Josh Patterson	807b40019f	Update soc_elasticsearch.yaml	2023-10-25 16:16:48 -04:00
Mike Reeves	d1170cb69f	Update soc_elasticsearch.yaml	2023-10-25 16:05:20 -04:00
Mike Reeves	6fb0c5dbfe	Annotation changes for warm node	2023-10-25 15:37:36 -04:00
Mike Reeves	a887551dad	Annotation changes for warm node	2023-10-25 15:22:47 -04:00
weslambert	d2063c7e11	Add auditd reference back	2023-08-29 11:14:49 -04:00
weslambert	f118e25e8c	Add Apache references	2023-08-29 11:00:31 -04:00
Wes	d2d0d53eef	Change order	2023-08-23 20:20:44 +00:00
Wes	31a49268cb	Add o365 and okta	2023-08-23 20:20:06 +00:00
Wes	2f51349ff8	Add SOC configuration	2023-08-23 20:07:42 +00:00
Jason Ertel	222352b4b3	fix typo	2023-08-17 17:26:35 -04:00
m0duspwnens	9cba9d9ae0	allow to override number_of_replicas from one place in soc ui	2023-08-17 15:00:01 -04:00
m0duspwnens	4d497022db	replace . with _x_ for soc ui compat	2023-08-10 09:52:18 -04:00
m0duspwnens	f9e272dd8f	add additional annotations for elasticsearch index settings	2023-08-09 16:09:23 -04:00
m0duspwnens	dfe916d7c8	add annotation for so-logs index	2023-08-09 15:19:17 -04:00
m0duspwnens	2a979197a0	enabled/disable elasticsearch in ui	2023-05-09 09:33:37 -04:00
Mike Reeves	2cb6f0f1e6	Add curator settings	2023-03-27 12:30:39 -04:00
Mike Reeves	444988f287	Adjust annotations	2023-03-21 08:48:02 -04:00
Mike Reeves	22c3a4d398	Adjust elasticsearch annotations	2023-03-20 16:08:26 -04:00
weslambert	134caa7f58	Various adjustments to descriptions	2023-02-28 16:31:16 -05:00