Commit Graph

3288 Commits

Author SHA1 Message Date
m0duspwnens
e05da4efc2 remove odl grafana.ini file https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 15:53:01 -05:00
m0duspwnens
c320efe7e4 fix whitespace https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 14:33:19 -05:00
m0duspwnens
617ed2a7c2 add a place to place files referenced in the config https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 14:06:54 -05:00
m0duspwnens
c5c053d24a change to header 2020-12-09 11:59:06 -05:00
m0duspwnens
75ea648cf9 change to file.managed https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 11:57:28 -05:00
m0duspwnens
6b479c5a89 pillarize grafana https://github.com/Security-Onion-Solutions/securityonion/issues/1175 2020-12-09 11:10:00 -05:00
Josh Brower
f34a10a986 Merge pull request #2259 from Security-Onion-Solutions/feature/playbook-updates2
Playbook db updates
2020-12-08 10:36:42 -05:00
Josh Brower
35be785f7a Playbook db updates 2020-12-08 10:35:50 -05:00
Jason Ertel
5d955bcdb7 Enable new SoStatus module in SOC for managing grid status 2020-12-08 09:22:18 -05:00
Josh Brower
8915e49288 Initial support - Playbook Overrides 2020-12-07 22:28:58 -05:00
Josh Patterson
2d9c6a42bf Merge pull request #2249 from Security-Onion-Solutions/issue/2188
Issue/2188
2020-12-07 16:52:34 -05:00
Josh Brower
35ea6c36d2 Merge pull request #2247 from Security-Onion-Solutions/feature/so-suricata-ruletest
so-suricata-testrule initial commit
2020-12-07 15:12:20 -05:00
William Wernert
64dc9f8d4e [fix] Only list ipv4 addresses when checking mysql 2020-12-07 14:40:32 -05:00
m0duspwnens
19d27c7d68 remove docker-ce-cli from common state 2020-12-07 11:50:47 -05:00
m0duspwnens
4fe2de2637 upgrade docker https://github.com/Security-Onion-Solutions/securityonion/issues/2188 2020-12-07 10:47:20 -05:00
Josh Brower
134d9bc89a so-suricata-testrule initial commit 2020-12-06 17:08:11 -05:00
Jason Ertel
967111decc Add node address to sensoroni pillar 2020-12-03 11:24:45 -05:00
weslambert
95570976a8 Add indices.query.bool.max_clause_count to allow for wildcard searches targeting more than 1024 fields 2020-12-03 09:29:44 -05:00
Wes Lambert
4ce3ec7582 Make scripts executable 2020-12-03 14:18:22 +00:00
Wes Lambert
f96365baba Add intial grouped Elastic start/stop/restart scripts 2020-12-03 14:17:32 +00:00
Jason Ertel
cf0ec2f78f Default to the node's primary IP for the description field 2020-12-02 16:38:33 -05:00
weslambert
c819729cd6 Don't use max_files or time_to_live for shutdown params 2020-12-02 13:17:19 -05:00
Josh Patterson
54d8dcdbb0 Merge pull request #2173 from Security-Onion-Solutions/issue/2079
Issue/2079
2020-12-02 11:46:29 -05:00
Jason Ertel
b7bc8db3b2 Modify PCAP quick action to work off of network community ID; Add new Correlate quick action 2020-12-01 17:37:44 -05:00
Jason Ertel
81b86bf7f2 Switch PCAP quick actions to support alternative lookup link when a single event ID is not available 2020-12-01 16:04:50 -05:00
m0duspwnens
ff6951cd95 Merge branch 'dev' of https://github.com/Security-Onion-Solutions/securityonion into issue/2079 2020-12-01 15:38:15 -05:00
m0duspwnens
141d7a35c9 if true cluster enabled allow search nodes to talk to each other https://github.com/Security-Onion-Solutions/securityonion/issues/2079 2020-12-01 15:38:09 -05:00
weslambert
9517cb2a58 Remove ScanMmbot 2020-12-01 11:25:51 -05:00
Josh Brower
c303cdff09 Merge pull request #2150 from Security-Onion-Solutions/bugfix/fleet-standalone
Fleet Fixes - mysql race condition
2020-11-30 18:06:30 -05:00
Josh Brower
e7a927188b Fleet Fixes - mysql race condition 2020-11-30 17:28:11 -05:00
Josh Brower
8e9458ca84 Merge pull request #2149 from Security-Onion-Solutions/bugfix/fleet-standalone
Fix Fleet setup errors
2020-11-30 12:06:36 -05:00
Josh Brower
5d2acf4011 Fix Fleet setup errors 2020-11-30 12:06:02 -05:00
William Wernert
8964444eeb [fix] Correct count print in mysql_conn 2020-11-30 11:32:43 -05:00
William Wernert
ec81e8565f [fix] Add safety logic to retry var in mysql_conn 2020-11-30 11:32:28 -05:00
William Wernert
040b435278 [refactor] Fail mysql_conn if the mainint has > 1 ip address 2020-11-30 11:10:50 -05:00
Josh Brower
65d8005629 Fleet standalone - fix event 2020-11-30 10:32:39 -05:00
Josh Brower
19b36f0468 Fleet standalone redirect fix 2020-11-27 11:43:51 -05:00
Josh Brower
38afd67108 Fleet standalone fix 2020-11-25 14:08:30 -05:00
Jason Ertel
979f171828 Add missing comma to sensoroni.json 2020-11-25 12:29:45 -05:00
Jason Ertel
8f9081618f Add role to sensoroni.json file 2020-11-25 11:11:46 -05:00
Jason Ertel
7fb264b4fe Use double quotes around agent key to ensure interpolation 2020-11-24 17:17:50 -05:00
Jason Ertel
d20560385f Remove /nsm/wazuh/etc subdir state since confirmed the Wazuh docker container itself 2020-11-24 16:50:46 -05:00
Jason Ertel
e1147398cc Ensure /nsm/wazuh is owned by ossec 2020-11-24 15:48:46 -05:00
Jason Ertel
ea9bbfd1aa Improve wazuh agent registration with retry logic to wait for manager to become ready 2020-11-24 13:53:20 -05:00
weslambert
0c4ee94472 Merge pull request #2077 from Security-Onion-Solutions/fix/thehive_upgrade_conf
Fix/thehive upgrade conf
2020-11-24 11:52:51 -05:00
weslambert
39bf60feb7 Add digit 2020-11-24 11:52:20 -05:00
weslambert
35653d2e66 Changes for ES7 2020-11-24 11:51:19 -05:00
weslambert
eb2364b926 Changes for ES7 2020-11-24 11:49:08 -05:00
Josh Patterson
9bb485cdc9 Merge pull request #2074 from Security-Onion-Solutions/issue/2040
Issue/2040
2020-11-24 11:45:08 -05:00
m0duspwnens
995a377432 squigly comma if steno enabled https://github.com/Security-Onion-Solutions/securityonion/issues/2040 2020-11-24 11:31:41 -05:00