 reyesj2
|
82830c8173
|
Fix typos and fix error related to elasticsearch saltstate being called from logstash state. Logstash will be removed from kafkanodes in future
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-02 16:37:39 -04:00 |
|
|
reyesj2
|
7f5741c43b
|
Fix kafka storage setup
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-02 16:36:22 -04:00 |
|
|
reyesj2
|
643d4831c1
|
CRLF -> LF
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-02 16:35:14 -04:00 |
|
|
reyesj2
|
b032eed22a
|
Update kafka to use manager docker registry
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-02 16:34:06 -04:00 |
|
|
reyesj2
|
1b49c8540e
|
Fix kafka keystore script
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-04-02 16:32:15 -04:00 |
|
 m0duspwnens
|
f7534a0ae3
|
make manager download so-kafka container
|
2024-04-02 16:01:12 -04:00 |
|
 Jason Ertel
|
b6187ab769
|
Improve wording for Airgap annotation
|
2024-04-02 15:54:39 -04:00 |
|
|
m0duspwnens
|
780ad9eb10
|
add kafka to manager nodes
|
2024-04-02 15:50:25 -04:00 |
|
 Mike Reeves
|
283939b18a
|
Gather metrics from elastic agent to influx
|
2024-04-02 15:36:01 -04:00 |
|
|
m0duspwnens
|
e25bc8efe4
|
Merge remote-tracking branch 'origin/reyesj2/kafka' into kaffytaffy
|
2024-04-02 13:36:47 -04:00 |
|
|
Jason Ertel
|
3b112e20e3
|
fix syntax error
|
2024-04-02 12:32:33 -04:00 |
|
 Doug Burks
|
2f03cbf115
|
FEATURE: Add Events table columns for event.module strelka #12716
|
2024-04-02 10:42:20 -04:00 |
|
|
Doug Burks
|
b2b54ccf60
|
FEATURE: Add Events table columns for event.module strelka #12716
|
2024-04-02 10:11:16 -04:00 |
|
|
Doug Burks
|
6c2437f8ef
|
FEATURE: Add Events table columns for event.module playbook #12703
|
2024-04-02 09:55:56 -04:00 |
|
|
Jason Ertel
|
f083558666
|
break out into sep func
|
2024-04-02 09:42:43 -04:00 |
|
|
Doug Burks
|
505eeea66a
|
Update defaults.yaml
|
2024-04-02 09:39:54 -04:00 |
|
 DefensiveDepth
|
7f488422b0
|
Add default columns
|
2024-04-02 09:13:27 -04:00 |
|
|
Jason Ertel
|
f17d8d3369
|
analytics
|
2024-04-01 10:59:44 -04:00 |
|
|
Jason Ertel
|
9d2b40f366
|
Merge branch '2.4/dev' into jertel/ana
|
2024-04-01 09:50:38 -04:00 |
|
|
Jason Ertel
|
3aea2dec85
|
analytics
|
2024-04-01 09:50:18 -04:00 |
|
 Corey Ogburn
|
e5a3a54aea
|
Proper YAML
|
2024-03-29 14:31:43 -06:00 |
|
|
Doug Burks
|
b64ed5535e
|
FEATURE: Add individual dashboards for Zeek SSL and Suricata SSL logs #12699
|
2024-03-29 15:29:38 -04:00 |
|
|
Doug Burks
|
5be56703e9
|
Merge pull request #12698 from Security-Onion-Solutions/dougburks-patch-1
FEATURE: Add Events table columns for zeek ssl and suricata ssl #12697
|
2024-03-29 14:46:39 -04:00 |
|
|
Doug Burks
|
0c7ba62867
|
FEATURE: Add Events table columns for zeek ssl and suricata ssl #12697
|
2024-03-29 14:44:29 -04:00 |
|
|
Corey Ogburn
|
e747a4e3fe
|
New Settings for Manual Sync in Detections
|
2024-03-29 12:25:03 -06:00 |
|
|
Doug Burks
|
102c3271d1
|
FEATURE: Add process.command_line to Process Info and Process Ancestry dashboards #12694
|
2024-03-29 12:04:47 -04:00 |
|
|
DefensiveDepth
|
32b8649c77
|
Add more error checking
|
2024-03-28 14:31:02 -04:00 |
|
|
DefensiveDepth
|
9c5ba92589
|
Check if container is running first
|
2024-03-28 13:23:40 -04:00 |
|
|
DefensiveDepth
|
d2c9e0ea4a
|
Cleanup
|
2024-03-28 13:04:48 -04:00 |
|
|
Jason Ertel
|
216b8c01bf
|
disregard errors that in removed applications that occurred before the upgrade
|
2024-03-28 09:31:39 -04:00 |
|
|
DefensiveDepth
|
ce0c9f846d
|
Remove containers from so-status
|
2024-03-27 16:13:52 -04:00 |
|
|
DefensiveDepth
|
ba262ee01a
|
Check to see if Playbook is enabled
|
2024-03-27 15:43:25 -04:00 |
|
|
DefensiveDepth
|
b571eeb8e6
|
Initial cut of .70 soup changes
|
2024-03-27 14:58:16 -04:00 |
|
|
Mike Reeves
|
d57f773072
|
Fix regex to allow ipv6 in bpfs
|
2024-03-27 09:36:42 -04:00 |
|
|
Doug Burks
|
e2caf4668e
|
FEATURE: Add Events table columns for event.module elastic_agent #12666
|
2024-03-26 16:08:41 -04:00 |
|
|
Josh Brower
|
63a58efba4
|
Merge pull request #12656 from Security-Onion-Solutions/2.4/detections-fixes
Add bindings for sigma repos
|
2024-03-26 09:33:38 -04:00 |
|
|
DefensiveDepth
|
bbcd3116f7
|
Fixes
|
2024-03-26 09:31:46 -04:00 |
|
|
Josh Brower
|
9c12aa261e
|
Merge pull request #12660 from Security-Onion-Solutions/kilo
Initial cut to remove Playbook and deps
|
2024-03-26 08:31:11 -04:00 |
|
|
DefensiveDepth
|
cc0f4847ba
|
Casing and validation
|
2024-03-26 08:10:57 -04:00 |
|
|
DefensiveDepth
|
7c4ea8a58e
|
Add Detections SOC Config
|
2024-03-26 07:39:39 -04:00 |
|
|
Doug Burks
|
20bd9a9701
|
FEATURE: Include additional groupby fields in Dashboards relating to sankey diagrams #12657
|
2024-03-26 07:39:24 -04:00 |
|
|
DefensiveDepth
|
94ee761207
|
Remove Playbook ref
|
2024-03-25 21:11:47 -04:00 |
|
|
DefensiveDepth
|
d7ecad4333
|
Initial cut to remove Playbook and deps
|
2024-03-25 19:42:31 -04:00 |
|
|
DefensiveDepth
|
49fa800b2b
|
Add bindings for sigma repos
|
2024-03-25 14:45:50 -04:00 |
|
|
reyesj2
|
446f1ffdf5
|
merge 2.4/dev
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>
|
2024-03-25 13:55:48 -04:00 |
|
 weslambert
|
df058b3f4a
|
Merge branch '2.4/dev' into feature/pfsense_suricata
|
2024-03-25 10:08:03 -04:00 |
|
|
Wes
|
5e21da443f
|
Minor verbiage updates
|
2024-03-25 13:58:32 +00:00 |
|
|
Josh Patterson
|
7898277a9b
|
Merge pull request #12651 from Security-Onion-Solutions/issue/12637
Allow for additional af-packet tuning options for Suricata
|
2024-03-25 09:37:52 -04:00 |
|
|
m0duspwnens
|
029d8a0e8f
|
handle yes/no on checksum-checks
|
2024-03-25 09:30:41 -04:00 |
|
|
Josh Brower
|
b8d33ab983
|
Merge pull request #12639 from Security-Onion-Solutions/2.4/enable-detections
Enable Detections
|
2024-03-25 09:30:01 -04:00 |
|