Commit Graph

5975 Commits

Author SHA1 Message Date
Jason Ertel
deb38844ba Correct hive init urls 2020-12-28 16:20:33 -05:00
Jason Ertel
7fe0182ede Refactor so-test and so-tcpreplay to be compatible with SO 2.3.20+; Change hive_init and cortex_init to initialize the cortex and fleet services directly on the manager IP instead of attempting to use the public URL 2020-12-28 11:26:56 -05:00
Jason Ertel
8f15d794bc Silence curl progress output during hive/cortex init 2020-12-24 08:44:28 -05:00
Jason Ertel
baf5be1a3a Return adequate exit code when init fails; Logs output of init scripts for troubleshooting failed installations 2020-12-23 20:14:46 -05:00
Jason Ertel
9cf150f988 Switch from Jinja syntax to bash 2020-12-23 15:11:43 -05:00
Jason Ertel
2d44b69e8d Refactor hive and cortex init to use wait loops instead of hardcoded sleeps 2020-12-23 12:12:38 -05:00
Jason Ertel
aa5c0a7351 Clarify prompt instructions for so-elastalert-test 2020-12-23 09:37:44 -05:00
Jason Ertel
eef1f49d09 Corrected cortex_init process which was incorrectly attempting to access ES via the external URL; Removing 1-2 minute sleeps during init to see if those are no longer needed 2020-12-22 22:56:01 -05:00
Jason Ertel
cfe5019f51 Add firewall listhogroups and listportgroups commands; Change AMI test defaults to use a custom hostname for cypress access 2020-12-22 17:59:59 -05:00
weslambert
f6a199156b Merge pull request #2428 from Security-Onion-Solutions/feature/strelka_pillar_repos
Support setting rule repos via pillar
2020-12-22 10:38:01 -05:00
Wes Lambert
ac96ded2dc Support setting rule repos via pillar 2020-12-22 15:36:15 +00:00
Mike Reeves
d73f3bb6f8 Update README.md 2020-12-21 10:53:41 -05:00
Mike Reeves
48931116ab Update VERSION 2020-12-21 10:52:37 -05:00
Mike Reeves
1f9151b407 Update README.md 2020-12-21 10:21:28 -05:00
TOoSmOotH
def8dc0e1e 2.3.20 ISO sig 2020-12-21 09:58:25 -05:00
Mike Reeves
88be7bca3f Update VERIFY_ISO.md 2020-12-21 09:56:18 -05:00
Mike Reeves
a0f00e09c1 2.3.20 Readme Update 2020-12-21 09:55:23 -05:00
weslambert
def08895d5 Merge pull request #2393 from Security-Onion-Solutions/fix/strelka_filestream
Fix/strelka filestream
2020-12-18 15:48:54 -05:00
weslambert
2fee2ca143 Change identifier name to be more descriptive 2020-12-18 15:40:54 -05:00
weslambert
7453626b06 Add identifier 2020-12-18 15:39:52 -05:00
Josh Patterson
4ccb80c9c8 Merge pull request #2392 from Security-Onion-Solutions/fix/sensoroni_fw
fix duplicate state name for fw
2020-12-18 15:02:52 -05:00
m0duspwnens
ad45779978 fix duplicate state name for fw 2020-12-18 15:01:55 -05:00
Josh Patterson
83326518c4 Merge pull request #2391 from Security-Onion-Solutions/fix/sensoroni_fw
Fix/sensoroni fw
2020-12-18 14:16:33 -05:00
m0duspwnens
66f62b912e Merge remote-tracking branch 'remotes/origin/dev' into fix/sensoroni_fw 2020-12-18 14:14:55 -05:00
m0duspwnens
4bbedfa027 put portgroup name in statename 2020-12-18 14:14:45 -05:00
Josh Patterson
5275583098 Merge pull request #2388 from Security-Onion-Solutions/fix/grafana_sensor_uptime
limit sensor uptime in grafana dash to 2 decimal
2020-12-18 13:41:54 -05:00
m0duspwnens
e756bbc430 limit sensor uptime in grafana dash to 2 decimal 2020-12-18 13:40:55 -05:00
Mike Reeves
dea88e4c68 Update soup 2020-12-18 13:27:08 -05:00
Josh Patterson
dec6cdd3c5 Merge pull request #2385 from Security-Onion-Solutions/fix/sensoroni_fw
add sensoroni port to minions for manager nodes
2020-12-18 13:08:16 -05:00
m0duspwnens
dbf82a891f add sensoroni port to minions for manager nodes 2020-12-18 13:06:14 -05:00
Mike Reeves
96bd1e72a7 Update soup 2020-12-18 11:55:24 -05:00
weslambert
1a463bccaf Add cron.absent to remove old cron job if present 2020-12-18 11:25:14 -05:00
Josh Patterson
b0db910e7a Merge pull request #2384 from Security-Onion-Solutions/fix/telegraf_stenoloss
make sure timestamp on steno log line has changed so we don't snapshot the drop%
2020-12-18 11:02:29 -05:00
m0duspwnens
90dcad7e6f make sure timestamp on steno log line has changed so we dont snapshot the drop% 2020-12-18 11:00:24 -05:00
weslambert
9493aad1a5 Read from dedicated unprocessed dir 2020-12-18 10:53:17 -05:00
weslambert
bf76c1b58c Create unprocessed dir and move Zeek extracted files there 2020-12-18 10:52:14 -05:00
Mike Reeves
575098e368 Update init.sls 2020-12-17 20:23:38 -05:00
Mike Reeves
39425c1ba8 Fix extra extrahosts 2020-12-17 20:15:56 -05:00
TOoSmOotH
6448ddc31a Allow SNs to resolve the ES master 2020-12-17 20:08:21 -05:00
Josh Patterson
89a9816d50 Merge pull request #2379 from Security-Onion-Solutions/fix/telegraf-suriloss
tell dc to use 4 decimal spot for suriloss calc
2020-12-17 18:08:35 -05:00
m0duspwnens
412e8eeccb tell dc to use 4 decimal spot for suriloss calc 2020-12-17 18:05:25 -05:00
Mike Reeves
6ccbe47f10 Fix Jinja 2020-12-17 16:34:49 -05:00
Mike Reeves
6fcc11eac2 Fix setup 2020-12-17 16:31:25 -05:00
Mike Reeves
b6f2cdce8c Fix whiptail menu 2020-12-17 15:57:13 -05:00
Jason Ertel
370a2cdb81 Update change.json for 2.3.20 2020-12-17 15:49:09 -05:00
TOoSmOotH
96ebb98fc6 Change wording about true clustering again 2020-12-17 15:34:29 -05:00
TOoSmOotH
336ec18e09 Change wording about true clustering 2020-12-17 15:32:34 -05:00
TOoSmOotH
d99596ad06 Fix Docker Settings on new installs 2020-12-17 15:21:29 -05:00
William Wernert
1f523deaea [fix] Playbook setup bug fixes
* Increase timeout for port check
* Exit with non-zero code in user create script if timeout exceeded or error occurs
2020-12-17 12:23:06 -05:00
Jason Ertel
e0dc6cbb41 Update screenshots with new Grid menu change 2020-12-17 11:15:49 -05:00