Commit Graph

11336 Commits

Author SHA1 Message Date
weslambert
ecf70847fd Change 'GLOBALS.minion_id' to 'GLOBALS.hostname' for 'analyzerNodeId' value to ensure SOC creates analyzer jobs in the correct directory 2023-02-22 16:23:48 -05:00
Josh Brower
3a2ec8e8bf Merge pull request #9830 from Security-Onion-Solutions/2.4/IDHMerge
Initial support for IDH
2023-02-21 12:19:53 -05:00
Josh Brower
b62cc32b1a Initial support for IDH 2023-02-21 11:52:37 -05:00
Doug Burks
eef81fdd1b Merge pull request #9805 from Security-Onion-Solutions/2.4/upgrade-elastic-8.6.2
2.4/upgrade elastic 8.6.2
2023-02-17 08:03:09 -05:00
Doug Burks
ef3abe158c UPGRADE: Elastic 8.6.2 #9804 2023-02-17 07:07:20 -05:00
Doug Burks
dfa5503e41 UPGRADE: Elastic 8.6.2 #9804 2023-02-17 07:06:36 -05:00
Jason Ertel
1f37af0e57 Merge pull request #9800 from Security-Onion-Solutions/kilo
influx upgrade
2023-02-16 13:51:53 -05:00
Jason Ertel
59b1af15db correct top order for import 2023-02-16 13:49:19 -05:00
Jason Ertel
79041d091e influx upgrade 2023-02-16 13:22:13 -05:00
Jason Ertel
e4de89c960 Merge pull request #9798 from Security-Onion-Solutions/jertel-remove-kilo-from-ver
Update VERSION
2023-02-16 10:57:19 -05:00
Jason Ertel
dcbf5a2fa6 Update VERSION 2023-02-16 10:55:32 -05:00
Jason Ertel
6e9d1f7c2c Merge pull request #9797 from Security-Onion-Solutions/kilo
Influx upgrade
2023-02-16 10:46:57 -05:00
weslambert
5e94a2cd74 Merge pull request #9790 from Security-Onion-Solutions/fix/kibana_default_data_view
Change default data view from '*:so-*' to 'logs-*'
2023-02-15 14:21:55 -05:00
weslambert
b7ad4e0570 Change default data view from 'so-*' to 'logs-*' 2023-02-15 14:19:29 -05:00
weslambert
967440f49f Merge pull request #9789 from Security-Onion-Solutions/fix/kibana_visualization_index-pattern_reference
Replace 'so-*' index-pattern reference with 'logs-*' for Kibana dashboard visualizations
2023-02-15 11:33:44 -05:00
Wes
790b3c5635 Replace 'so-*' index-pattern reference with 'logs-*' for Kibana dashboard visualizations 2023-02-15 16:30:56 +00:00
Jason Ertel
c43ccb7ed2 influx upgrade 2023-02-15 09:47:18 -05:00
Jason Ertel
a9b3594b35 merge 2023-02-15 08:06:41 -05:00
Jason Ertel
8746f55834 influx upgrade 2023-02-15 08:03:22 -05:00
Jason Ertel
1fa526cd0e influx upgrade 2023-02-14 11:22:54 -05:00
Jason Ertel
d15158e77a influx upgrade 2023-02-13 20:52:12 -05:00
Jason Ertel
0890129c69 influx upgrade 2023-02-13 19:30:10 -05:00
Jason Ertel
e3ca0345a8 upgrade influx 2023-02-13 15:41:37 -05:00
Jason Ertel
1fa8294ee6 influx upgrade 2023-02-13 14:56:51 -05:00
weslambert
689ba5f341 Merge pull request #9778 from Security-Onion-Solutions/fix/filebeat_remove_docker_image
Remove 'so-filebeat' from list of trusted containers
2023-02-13 10:00:36 -05:00
weslambert
40d3269db3 Remove 'so-filebeat' from list of trusted containers 2023-02-13 09:58:39 -05:00
Jason Ertel
7b3acd53a1 upgrade influx 2023-02-13 09:55:45 -05:00
Jason Ertel
47af14c265 upgrade influx 2023-02-13 09:51:48 -05:00
Jason Ertel
34d19e308f influx upgrade 2023-02-10 19:42:25 -05:00
Jason Ertel
e5c26032c4 influx upgrade 2023-02-10 19:37:59 -05:00
Jason Ertel
4f0af9ac6b influx upgrade 2023-02-10 18:41:29 -05:00
Jason Ertel
0056b8f703 influx upgrade 2023-02-10 18:35:18 -05:00
Jason Ertel
39009ce938 influx upgrade 2023-02-10 18:32:01 -05:00
Jason Ertel
7dee2686ac influx upgrade 2023-02-10 18:19:31 -05:00
Jason Ertel
cd27ae89cc influx upgrade 2023-02-10 16:34:06 -05:00
weslambert
21ca8a9c50 Merge pull request #9770 from Security-Onion-Solutions/fix/elasticsearch_ilm_soc_annotations_settings
Add SOC annotation settings for Elasticsearch's ILM feature
2023-02-10 15:51:29 -05:00
weslambert
acda03ce40 Add annotation settings for Elasticsearch's ILM feature, and remove various index keys 2023-02-10 14:57:11 -05:00
weslambert
f2f318982e Merge pull request #9768 from Security-Onion-Solutions/fix/elasticsearch_ilm_policy_load_additions
Manage Elasticsearch index lifecycle management policies in Elasticsearch state
2023-02-10 14:16:32 -05:00
Wes
1255c60317 Move policy load script into Elasticsearch state script directory 2023-02-10 18:59:45 +00:00
Wes
994eabae1b Manage policy loading in Elasticsearch state 2023-02-10 18:57:19 +00:00
weslambert
82119b0247 Merge pull request #9765 from Security-Onion-Solutions/fix/elastic_utility_scripts_permissions
Ensure Elastic utility scripts have the correct permissions
2023-02-10 10:30:14 -05:00
Wes
1d0e09bdf7 Ensure Elastic utility scripts have the correct permissions 2023-02-10 15:26:46 +00:00
weslambert
7564a82b52 Merge pull request #9764 from Security-Onion-Solutions/fix/elasticsearch_ilm_dynamic_policy_loadiing
ILM Policy Changes
2023-02-10 10:17:14 -05:00
Wes
c9118699a9 Add index management lifecycle policy defintion and reference in index template 2023-02-10 15:10:30 +00:00
Wes
d17cf89c68 Fix Bash shebang 2023-02-10 15:01:09 +00:00
Wes
7b7461ef01 Dynamically load index management lifecycle policies based on pillar values 2023-02-10 14:59:29 +00:00
Jason Ertel
e77813a173 influx upgrade 2023-02-09 19:14:58 -05:00
Jason Ertel
0eec8b22a2 influx upgrade 2023-02-09 18:27:14 -05:00
Jason Ertel
0e50d36da6 upgrade influx 2023-02-09 16:18:04 -05:00
Jason Ertel
067b6bacd1 merge from 2.4/dev 2023-02-09 11:57:51 -05:00