58 Commits

Author	SHA1	Message	Date
reyesj2	b9d813cef2	typo	2025-07-08 18:26:46 -05:00
reyesj2	d4f0cbcb67	changes for 'generic' integrations with no compoent templates assigned. Default to using the logs-filestream.generic@package componet template	2025-07-08 15:23:46 -05:00
weslambert	aacd715379	Retry after 1 second	2024-09-25 13:07:01 -04:00
weslambert	50ae37c160	Check if running during soup	2024-09-25 08:25:20 -04:00
m0duspwnens	df14cbad44	fix calls to get_elastic_agent_vars	2024-09-04 17:43:49 -04:00
weslambert	dd09f5b153	Add so-soc-logs	2024-08-26 10:32:27 -04:00
weslambert	d7e3e134a5	Check Elasticsearch for template	2024-08-22 10:33:13 -04:00
weslambert	2a024039bf	Merge pull request #13528 from Security-Onion-Solutions/fix/detections_alerts_ilm ... Create detections.alerts ILM policy with corresponding name	2024-08-21 14:50:10 -04:00
weslambert	88ea60df2a	Fix name	2024-08-21 14:38:57 -04:00
weslambert	c1b7232a88	Fix for detections-alerts	2024-08-21 14:38:29 -04:00
weslambert	4108e67178	Check for endpoint package	2024-08-21 14:22:28 -04:00
weslambert	5f74b1b730	Update column number because of changes to API	2024-08-15 08:26:56 -04:00
Doug Burks	ab63d5dbdb	Update so-elasticsearch-cluster-space-used for changes in _cat/allocation API	2024-08-15 08:01:22 -04:00
weslambert	d833bd0d55	Elastic 8.14.3	2024-07-30 12:45:25 -04:00
weslambert	fe1824aedd	Revert "Elastic 8.14.2"	2024-07-15 11:28:59 -04:00
weslambert	0db0754ee5	Merge pull request #13316 from Security-Onion-Solutions/foxtrot ... Elastic 8.14.2	2024-07-10 08:53:03 -04:00
Wes	1b47d5c622	Changes for Elastic 8.14.1	2024-07-01 15:16:58 +00:00
m0duspwnens	81fcd68e9b	create and use redis:nodes and elasticsearch:nodes pillars	2024-06-20 16:42:11 -04:00
weslambert	deb140e38e	Exclude detections from template name matching	2024-05-21 13:38:52 -04:00
weslambert	b424426298	Exclude suricata	2024-04-25 09:14:18 -04:00
weslambert	44afa55274	Fix comments about deletion	2024-04-24 17:41:37 -04:00
weslambert	ab832e4bb2	Include logstash-prefixed indices	2024-04-24 17:17:53 -04:00
weslambert	59a02635ed	Change index sorting	2024-04-24 15:18:49 -04:00
Doug Burks	406dda6051	Update so-elasticsearch-cluster-space-used	2024-04-18 11:48:15 -04:00
Doug Burks	229a989914	Update so-elasticsearch-cluster-space-total	2024-04-18 11:47:01 -04:00
Wes	4baf4657f6	Curator cleanup	2023-12-20 19:10:22 +00:00
Wes	54c3167b10	Delete data streams when necessary	2023-12-12 05:25:50 +00:00
Wes	d203aec44a	Remove Curator	2023-12-08 19:37:06 +00:00
weslambert	02baa18502	Add metrics	2023-11-08 22:41:24 -05:00
weslambert	e39edab00d	Exclude osquery and display failed name	2023-11-08 20:55:08 -05:00
weslambert	acb6e84248	Don't load index template if component template doesn't exist	2023-11-08 20:34:08 -05:00
Jason Ertel	d256be3eb3	allow template loads to partially succeed only on the initial attempt	2023-11-08 10:32:11 -05:00
Wes	653fda124f	Check expected with retry	2023-11-08 13:02:17 +00:00
Wes	b46e86c39b	Extend index template loading to 60 attempts and a total of ~5 minutes	2023-11-08 02:29:09 +00:00
Wes	de9f9549af	Extend template loading to 24 attempts and a total of ~2 minutes	2023-11-07 23:55:03 +00:00
weslambert	749e22e4b9	Fix if statement	2023-11-07 17:29:38 -05:00
Wes	570624da7e	Remove RETURN_CODE	2023-11-07 21:09:29 +00:00
Wes	1676c84f9c	Use the retry function so-elasticsearch-query	2023-11-07 19:56:50 +00:00
Wes	0b4a246ddb	State file changes and retry logic	2023-11-07 16:44:42 +00:00
weslambert	51e7861757	Don't source so-elastic-fleet-common if not there	2023-11-02 16:41:34 -04:00
m0duspwnens	4d497022db	replace . with _x_ for soc ui compat	2023-08-10 09:52:18 -04:00
Wes	0b5ee49873	Fix inverted logic for component template	2023-07-06 20:46:35 +00:00
Wes	910125f13a	Restructure logic	2023-07-06 17:49:06 +00:00
Wes	d551faeb16	Heavy node template considerations	2023-07-06 17:19:28 +00:00
weslambert	c2efd7ef64	Merge pull request #10655 from Security-Onion-Solutions/feature/supported_integrations ... Restructure Elasticsearch templates for supported integrations	2023-06-26 09:43:10 -04:00
weslambert	e2ff48164b	Only load if so-elastic-fleet-common exists	2023-06-23 16:03:58 -04:00
Wes	d8700137d2	Add updated so-elasticsearch-templates-load	2023-06-23 13:23:29 +00:00
m0duspwnens	19469205e1	include eval and import in so-elasticsearch-cluster-settings	2023-06-22 13:12:47 -04:00
m0duspwnens	6c4c815683	change so-elasticsearch-cluster settings to include heavynode, and only run on managers	2023-06-22 13:04:20 -04:00
Wes	4469a93a75	Fix typo	2023-05-30 18:24:30 +00:00