m0duspwnens
59d5be682a
ensure bash is used for influx query
2022-04-08 15:01:38 -04:00
m0duspwnens
8aa002b82e
add states to remove ca and ssl keys and certs and call them during reinstall.
2022-01-26 09:33:19 -05:00
m0duspwnens
fed8bfac67
more requires on docker containers
2021-10-22 14:10:59 -04:00
m0duspwnens
dac19d224f
update cq
2021-06-29 17:15:00 -04:00
m0duspwnens
ca152ab04c
redefine measurements
2021-06-29 09:54:17 -04:00
m0duspwnens
bf8bba7b84
only set measurements if conditions are met
2021-06-29 08:57:51 -04:00
m0duspwnens
6b68a39cbe
handle senario where there are no measurements
2021-06-29 07:46:25 -04:00
m0duspwnens
1c516daa96
fix measurement list
2021-06-28 17:05:32 -04:00
m0duspwnens
21c9388ee6
generate measurement list and cq for each
2021-06-28 16:12:36 -04:00
William Wernert
c1dd4dafe4
Fix influx state
2021-05-21 12:41:10 -04:00
William Wernert
fe3aec173f
Merge branch 'master' into feature/merge-2.3.51
...
# Conflicts:
# VERSION
# salt/influxdb/init.sls
2021-05-21 12:31:54 -04:00
m0duspwnens
e50002e0ca
influx and grafana default for manager nodes - https://github.com/Security-Onion-Solutions/securityonion/issues/4207
2021-05-17 16:26:12 -04:00
m0duspwnens
d3af06e7a4
handle exception if influxdb module doesnt exist
2021-05-13 11:00:42 -04:00
m0duspwnens
74f2a61b25
install influxdb and grafana during setup prior to final highstate
2021-05-13 09:06:47 -04:00
m0duspwnens
6474c296e1
dont need to specify dest rp
2021-05-06 20:26:13 -04:00
m0duspwnens
da528e802f
ensure migration script doesnt migrate the current days data and fix downsample cq to move from so_short_term rp
2021-05-06 12:52:47 -04:00
m0duspwnens
9dbb9f519b
create so_short_term rp as default so that autogen can just be dropped once data is downsampled
2021-05-06 09:14:49 -04:00
m0duspwnens
6a639edb05
have cq created once again
2021-05-05 08:33:31 -04:00
m0duspwnens
c5f99b012e
comment out creation of cq to test data migration
2021-05-04 13:58:53 -04:00
m0duspwnens
fcd1bea4a3
remove auto data migration, change duration from 0s to 0d
2021-05-04 12:06:03 -04:00
m0duspwnens
a0f1839162
run in background
2021-05-04 09:59:16 -04:00
m0duspwnens
d6b9154a88
change how version to be installed is defined to work with centos
2021-04-30 14:48:51 -04:00
m0duspwnens
e32ca284c5
ensure proper version of python3-influxdb is installed prior to running the states that require it
2021-04-30 11:10:31 -04:00
m0duspwnens
907dbe6388
for for influx to be up so the reliant states dont fail
2021-04-29 08:47:33 -04:00
m0duspwnens
f8e01d5d53
let the state retry incase influxdb isnt fully up yet
2021-04-29 06:43:05 -04:00
m0duspwnens
28982e0e0b
fix requirement
2021-04-21 19:22:07 -04:00
m0duspwnens
d792c65ce3
change how influx is patch and python3-influxdb is installed
2021-04-21 09:25:25 -04:00
m0duspwnens
8eef574342
install python3-influxdb and create requires
2021-04-21 08:28:01 -04:00
m0duspwnens
115764ae38
merge with dev and fix merge conflict in so-functions https://github.com/Security-Onion-Solutions/securityonion/issues/3264
2021-04-20 10:03:15 -04:00
Jason Ertel
e430be1017
Enable Flux compatibility mode to prepare for eventual migration to 2.0
2021-04-02 16:36:29 -04:00
m0duspwnens
5cda35db0a
change defaults for testing - https://github.com/Security-Onion-Solutions/securityonion/issues/3264
2021-04-01 10:45:54 -04:00
m0duspwnens
4f3b3a787c
change defaults for testing, remove measurements list since cq uses wildcard now - https://github.com/Security-Onion-Solutions/securityonion/issues/3264
2021-04-01 10:18:29 -04:00
m0duspwnens
30c6d4756a
change default long term resolution to 5m
2021-03-30 09:38:37 -04:00
m0duspwnens
d1150f150f
loop through the rps
2021-03-29 10:59:18 -04:00
m0duspwnens
e0f4abaa09
try to do it with just 1 cq, modify defaults for testing
2021-03-29 10:36:56 -04:00
m0duspwnens
889e624a8c
add shard_duration to state and defaults - https://github.com/Security-Onion-Solutions/securityonion/issues/3264
2021-03-25 09:33:10 -04:00
m0duspwnens
a3e11f017b
merge with 2.3.40
2021-03-23 14:34:52 -04:00
m0duspwnens
c4da576030
ensure the presence of the telegraf database
2021-03-11 12:20:32 -05:00
m0duspwnens
3385ba2ca2
verify ssl
2021-03-11 09:35:54 -05:00
m0duspwnens
6dba2879c5
change so_long_term rp to 6h for tetsing
2021-03-11 09:25:44 -05:00
m0duspwnens
75012cdcba
create rps and cqs
2021-03-10 15:20:11 -05:00
m0duspwnens
1f9e5ca3cc
install influxdb python module add test retention policies
2021-03-09 10:31:59 -05:00
William Wernert
f5c044e3e3
[fix] Log directory fixes
...
* The playbook log dir is owned by the socore group, so we can use `su root socore`
* Addresses https://github.com/Security-Onion-Solutions/securityonion/pull/2681#issuecomment-767761670
---
* influxdb runs as root, so we can set the log directory permissions to 755 for this service
2021-01-26 16:07:34 -05:00
William Wernert
1939fe85d7
[fix] Revert directory permission changes
2021-01-26 13:41:10 -05:00
William Wernert
59a4b148bc
Merge branch 'dev' into logrotate-fix
2021-01-22 15:20:55 -05:00
Masaya-A
845ab92d36
To make log rotation working
2021-01-21 09:30:34 +09:00
m0duspwnens
b693373d8d
change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679
2021-01-20 15:09:53 -05:00
Masaya-A
0d93b15a63
Disable weak cipher suites from influxdb
...
The default config of influxdb enables use of some weak cipher suites such as RC4 and 3DES(SWEET32).
To disable them, a list of enabled ciphers added into influxdb.conf.
2021-01-15 11:47:04 +09:00
m0duspwnens
1fca5e65df
redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681
2020-11-10 15:31:47 -05:00
William Wernert
e1d8f578c2
[feat] Add log dirs for playbook + influxdb
2020-10-08 12:35:14 -04:00
