Commit Graph

2552 Commits

Author SHA1 Message Date
Josh Brower
b7dd14b8f0 Set event.code to string for WEL 2020-08-28 13:40:04 -04:00
Jason Ertel
4e3e83820f Correct pillar key for thehive 2020-08-28 08:17:42 -04:00
m0duspwnens
b1e7ffc173 fix inbound for monitor traffic on standalone graphana dashboard 2020-08-27 18:24:26 -04:00
Jason Ertel
a3e34bfaca Add users to Fleet, TheHive, and Cortex when adding a user to SO via so-user-add command 2020-08-27 16:58:02 -04:00
Mike Reeves
2b0b695ee4 Fix duplicate docker 2020-08-27 10:15:22 -04:00
weslambert
509985ed07 Merge pull request #1254 from Security-Onion-Solutions/fix/sensor_clean
Cron updates
2020-08-26 11:03:03 -04:00
weslambert
000c2abb33 Update timing for so-yara-update 2020-08-26 11:02:33 -04:00
Mike Reeves
e993397173 Update docker to latest version 2020-08-26 10:35:17 -04:00
Josh Brower
67e0a219e6 Upgraded to Fleet 3.1 2020-08-26 06:13:45 -04:00
Josh Brower
b6ebcf6551 Merge pull request #1250 from Security-Onion-Solutions/feature/es-security-field
Adds new .security analyzed subfield
2020-08-26 05:12:23 -04:00
Josh Brower
1cf7301db4 Adds new .security analyzed subfield 2020-08-26 05:11:42 -04:00
Jason Ertel
3122280bd5 Update version to 2.2.0-rc.3 2020-08-25 15:16:09 -04:00
weslambert
ce49e050bc Update timing for sensor clean cron 2020-08-25 12:14:43 -04:00
Wes Lambert
c03812f7ab Add rotation for sensor_clean log 2020-08-25 15:34:30 +00:00
weslambert
a8f727ad40 Don't write to log if not past CRIT_DISK_USAGE 2020-08-25 11:19:36 -04:00
Mike Reeves
a97ca94354 Rotate suri stats log hourly 2020-08-23 16:08:17 -04:00
Mike Reeves
ebd8105cb5 Rotate suri stats log hourly 2020-08-23 16:03:37 -04:00
Jason Ertel
9c6cc81f70 Remove improper suricata logging filter - this re-enables logging output for the suricata process itself 2020-08-21 12:44:28 -04:00
Mike Reeves
05d727e599 Final changes.json update 2020-08-20 19:18:39 -04:00
Mike Reeves
2b88f22eb2 Make HUP for rotate more reliable 2020-08-20 17:57:36 -04:00
Mike Reeves
b7da768dc7 add logrotate 2020-08-20 16:46:32 -04:00
Josh Patterson
44093e7484 Merge pull request #1228 from Security-Onion-Solutions/quickfix/importnode
remove bonding for import node
2020-08-20 14:23:21 -04:00
m0duspwnens
a7a0520cfe remove bonding for import node 2020-08-20 14:20:09 -04:00
Jason Ertel
d1e5649a68 Corrected JSON typo and improved formatting 2020-08-20 13:46:20 -04:00
Mike Reeves
3eea2c6b10 2.1.0 Release notes in changes.json 2020-08-20 13:26:14 -04:00
Mike Reeves
df95baa835 Point logstash to use intca.crt 2020-08-20 10:45:48 -04:00
m0duspwnens
43f4ebbcf1 remove monint from managersearch since they dont have a monint 2020-08-20 09:05:38 -04:00
Mike Reeves
2fce138d95 Change it to grains.host instead of grains.id 2020-08-19 21:26:27 -04:00
Mike Reeves
ccc2ed4478 don't create symlinks if a heavy node 2020-08-19 21:18:57 -04:00
Mike Reeves
f9e5ea8ba7 Fix SSL for filebeat 2020-08-19 21:12:41 -04:00
Mike Reeves
f7d3dca322 Fix duplicate state 2020-08-19 21:00:28 -04:00
Mike Reeves
d969b1e1b7 Update init.sls 2020-08-19 20:56:08 -04:00
Mike Reeves
507a3e852c Update init.sls 2020-08-19 20:02:38 -04:00
Mike Reeves
5f41d9fc25 fix filebeat certs 2020-08-19 19:51:57 -04:00
Mike Reeves
8312221c82 Update soup 2020-08-19 18:51:32 -04:00
Mike Reeves
0439cf3205 Update soup 2020-08-19 18:47:36 -04:00
Jason Ertel
2325940789 Ensure strelka manager connects to local redis on heavy nodes 2020-08-19 16:24:28 -04:00
Josh Patterson
9fce1fc47d Merge pull request #1220 from Security-Onion-Solutions/issue/1188
Issue/1188
2020-08-19 16:15:43 -04:00
Jason Ertel
5ff0058a65 Ensure strelka backend, frontend, and filestream are connecting to redis locally, on heavy node instances 2020-08-19 16:13:18 -04:00
m0duspwnens
961cc67e3f add nginx state to heavynode 2020-08-19 16:05:40 -04:00
Mike Reeves
51a52228ac Update init.sls 2020-08-19 16:01:58 -04:00
Mike Reeves
4527758e87 Update init.sls 2020-08-19 16:00:04 -04:00
m0duspwnens
826254bc3d give redis key to heavy node too 2020-08-19 15:59:48 -04:00
Mike Reeves
ac2cf8c6d8 Merge pull request #1219 from Security-Onion-Solutions/feature/mkrsoup
Feature/mkrsoup
2020-08-19 15:47:53 -04:00
Mike Reeves
db2cc5f7a7 Update init.sls 2020-08-19 15:43:51 -04:00
weslambert
b5dd868d1b Add manager IP to container hosts file 2020-08-19 14:34:28 -04:00
Mike Reeves
6edf1c14f8 Fix filebeat certs 2020-08-19 13:35:58 -04:00
Mike Reeves
bf84822d36 fix if logic 2020-08-19 13:04:10 -04:00
Mike Reeves
3d48c1f99b Add playbook updates 2020-08-19 12:14:11 -04:00
Mike Reeves
9280dbb9d9 Update soup 2020-08-19 12:00:25 -04:00