Commit Graph
35 Commits
Author SHA1 Message Date
Wes Lambert e70db05a0f Filebeat - Modify config for Wazuh alerts 2018-12-10 19:50:55 +00:00
Wes Lambert cb68f502ee Wazuh - Changes to init.sls 2018-12-10 19:49:14 +00:00
Wes Lambert 0a33204726 Setup - Only add Wazuh repo 2018-12-07 18:16:03 +00:00
Wes Lambert e6469d505a Wazuh - initial init.sls 2018-12-07 18:13:42 +00:00
Wes Lambert 6a9a537cf8 Wazuh - Remove filebeat.yml 2018-12-07 13:39:10 +00:00
Wes Lambert e355503324 Filebeat - Update for Wazuh logs 2018-12-07 13:38:31 +00:00
Wes Lambert e11aadf730 Wazuh - agent install for CentOS 2018-12-07 13:36:11 +00:00
Wes Lambert f5e2b7f210 Setup - Adjust to prevent unary operator error 2018-12-07 04:22:11 +00:00
Wes Lambert 6bfb813cdf Setup - Adjust syntax 2018-12-07 04:18:28 +00:00
Wes Lambert e21c67f553 Setup - Fix typo 2018-12-07 04:14:30 +00:00
Wes Lambert bccb83fae9 Setup - Install Wazuh agent 2018-12-07 03:57:31 +00:00
Wes Lambert e335be7476 Elastalert - Remove config from ES Module 2018-12-06 05:44:09 +00:00
Wes Lambert d310f163e8 Elastalert - Enable for Master/Eval 2018-12-06 05:43:15 +00:00
Wes Lambert fe1c771f21 Elastalert - Initial Config 2018-12-06 05:42:30 +00:00
Wes Lambert 52dfe2500a Cleanup - Remove pulledpork module 2018-12-06 03:14:03 +00:00
Wes Lambert e7be61bd28 Cleanup - Remove somaster module 2018-12-06 03:13:39 +00:00
Wes Lambert 3ffdcd81d6 Redis - Don't start if using Eval Mode 2018-12-06 03:07:16 +00:00
Wes Lambert 5c28576674 Logtash - Update input for Eval Mode 2018-12-06 02:38:59 +00:00
Wes Lambert 6399889e60 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack 2018-12-05 16:13:40 +00:00
Wes Lambert 88c144a250 Curator - Fix path for master pillar additions 2018-12-05 15:51:10 +00:00
Wes Lambert aa32a55b4e Curator - Update Master pillar in setup 2018-12-05 15:16:14 +00:00
Wes Lambert 3461c7e226 Curator - Update config for Eval Mode 2018-12-05 15:14:36 +00:00
Wes Lambert 7a260a4876 Curator - Move files to /usr/sbin 2018-12-05 13:24:16 +00:00
Wes Lambert 90e3b6912c Curator - Remove Curator files from ES module 2018-12-05 13:14:19 +00:00
Wes Lambert 2e73a6fb02 Curator - Update top.sls for Curator 2018-12-05 13:13:15 +00:00
Wes Lambert 1ccece70ef Curator - Remove config from ES 2018-12-05 13:10:29 +00:00
Wes Lambert ce70e590a1 Curator - break out from ES and add config 2018-12-05 13:09:07 +00:00
Wes Lambert 4c67695cd0 Setup - Set cur_close_days and log_size_limit 2018-12-05 13:06:29 +00:00
Wes Lambert 7399172450 Merge branch 'master' of https://github.com/toosmooth/securityonion-saltstack 2018-11-30 15:39:38 +00:00
Wes Lambert 056e22dd11 Logstash - Update template for Suricata metadata fields 2018-11-30 13:22:31 +00:00
Wes Lambert 05accf3017 Logstash - Output config update for IDS type 2018-11-30 13:17:53 +00:00
Wes Lambert 2695a8e1a7 Filebeat - Modify config for IDS type 2018-11-30 13:15:35 +00:00
Wes Lambert 53284a7173 Bro - Switch logs to JSON format 2018-11-30 13:13:55 +00:00
Wes Lambert 61802f7d62 adjust logging options 2018-11-03 15:17:38 +00:00
Wes Lambert a531dd6e52 update template for eve.json output 2018-11-03 15:11:49 +00:00