  Wes LambertandWilliam Wernert
|
7ea861650f
|
updated placeholder in saved objects
|
2020-04-18 19:11:20 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
8622dab0d2
|
update load script
|
2020-04-18 19:11:19 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
66b4f15a7b
|
replace static value for comm id
|
2020-04-18 19:03:11 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
b67229783b
|
update parsing for Zeek files
|
2020-04-18 18:59:21 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
358d2f74b2
|
update key name
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0a564a438b
|
update Kibana config
|
2020-04-18 18:58:27 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
5f2fa0fdc5
|
migrate Zeek clean script from Bro
|
2020-04-18 18:56:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
159799c91d
|
move PL
|
2020-04-18 18:10:34 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0c658d01ef
|
remark config load section for now
|
2020-04-18 18:10:33 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
19678aa977
|
fix order
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
40e683d7a6
|
replace URL template with Label template
|
2020-04-18 18:09:38 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
0e3978b87c
|
Revert "update Kibana config"
This reverts commit 82bd14252c.
|
2020-04-18 18:09:37 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
f2b3ca8763
|
add Kibana config export command
|
2020-04-18 18:08:41 -04:00 |
|
|
Wes LambertandWilliam Wernert
|
a7bb014fba
|
update Kibana config
|
2020-04-18 18:08:40 -04:00 |
|
 weslambertandGitHub
|
fea345326b
|
Merge pull request #525 from Security-Onion-Solutions/fix/strelka_filebeat
update variables
|
2020-04-06 09:11:04 -04:00 |
|
|
Wes Lambert
|
ad5626f407
|
update variables
|
2020-04-06 13:09:52 +00:00 |
|
|
weslambertandGitHub
|
673c64d2a4
|
Merge pull request #523 from Security-Onion-Solutions/fix/elastic_improvements
Fix/elastic improvements
|
2020-04-05 16:53:19 -04:00 |
|
|
Wes Lambert
|
c476b28ac8
|
update script
|
2020-04-05 20:52:00 +00:00 |
|
|
Wes Lambert
|
cc9a91bfdb
|
update Kibana config
|
2020-04-05 20:50:29 +00:00 |
|
|
Wes Lambert
|
7765d9a038
|
update common template
|
2020-04-05 20:40:30 +00:00 |
|
|
Wes Lambert
|
9e50387eec
|
update ingest files
|
2020-04-05 20:40:00 +00:00 |
|
|
weslambertandGitHub
|
69c90fcdc1
|
Merge pull request #516 from Security-Onion-Solutions/fix/kibana_placeholders
fix placeholders
|
2020-04-03 08:31:54 -04:00 |
|
|
Wes Lambert
|
52edbd23d6
|
fix placeholders
|
2020-04-03 12:21:32 +00:00 |
|
|
weslambertandGitHub
|
0e568103d1
|
Merge pull request #515 from Security-Onion-Solutions/fix/add_more_dashes
update dashboards
|
2020-04-03 00:25:58 -04:00 |
|
|
Wes Lambert
|
638ed36a79
|
update dashboards
|
2020-04-03 04:23:50 +00:00 |
|
|
weslambertandGitHub
|
61aa723c1d
|
Merge pull request #514 from Security-Onion-Solutions/fix/strelka_setup
install Strelka for sensor
|
2020-04-02 21:37:07 -04:00 |
|
|
Wes Lambert
|
b22a3a6534
|
install Strelka for sensor
|
2020-04-03 01:36:00 +00:00 |
|
|
weslambertandGitHub
|
86ccca3c2e
|
Merge pull request #513 from Security-Onion-Solutions/fix/strelka_backend_restart
change restart policy for now
|
2020-04-02 21:09:56 -04:00 |
|
|
Wes Lambert
|
17fd32f12d
|
change restart policy for now
|
2020-04-03 01:07:45 +00:00 |
|
|
weslambertandGitHub
|
395503165c
|
Merge pull request #512 from Security-Onion-Solutions/fix/strelka_cron
change user
|
2020-04-02 21:03:32 -04:00 |
|
|
Wes Lambert
|
d477d73baa
|
change user
|
2020-04-03 01:02:46 +00:00 |
|
|
weslambertandGitHub
|
8d84ee9c81
|
Merge pull request #511 from Security-Onion-Solutions/fix/kibana_load
update Kibana config
|
2020-04-02 21:00:45 -04:00 |
|
|
Wes Lambert
|
f0848906e7
|
update Kibana config
|
2020-04-03 00:59:23 +00:00 |
|
|
weslambertandGitHub
|
7cefc218c4
|
Merge pull request #505 from Security-Onion-Solutions/strelka-sensor
Strelka sensor
|
2020-04-02 16:04:35 -04:00 |
|
|
Wes Lambert
|
9a082725d1
|
add Strelka for sensor if enabled
|
2020-04-02 20:03:29 +00:00 |
|
|
Wes Lambert
|
eb0c23387b
|
specify ES vs LS in FB config
|
2020-04-02 20:01:49 +00:00 |
|
|
weslambertandGitHub
|
fd2b35dd21
|
Merge pull request #498 from Security-Onion-Solutions/fix/observer
use agent name for observer name
|
2020-04-01 17:28:52 -04:00 |
|
|
Wes Lambert
|
e023aeb9be
|
use agent name for observer name
|
2020-04-01 21:27:25 +00:00 |
|
|
weslambertandGitHub
|
b14f9067ab
|
Merge pull request #495 from Security-Onion-Solutions/fix/zeek_output_config
Bro to Zeek
|
2020-04-01 15:19:02 -04:00 |
|
|
weslambertandGitHub
|
edbe512d82
|
Bro to Zeek
|
2020-04-01 15:18:30 -04:00 |
|
|
weslambertandGitHub
|
5f8d1c29b4
|
Merge pull request #494 from Security-Onion-Solutions/search_ls_pillar
Search ls pillar
|
2020-04-01 15:13:17 -04:00 |
|
|
Wes Lambert
|
22e7777d67
|
update search sls
|
2020-04-01 19:12:07 +00:00 |
|
|
Wes Lambert
|
09022ad752
|
Update Zeek and Strelka
|
2020-04-01 19:11:10 +00:00 |
|
|
Wes Lambert
|
1df2302287
|
Update Zeek and Strelka
|
2020-04-01 19:09:38 +00:00 |
|
|
weslambertandGitHub
|
82c99edbfc
|
Update Suricata output
|
2020-04-01 15:02:52 -04:00 |
|
|
weslambertandGitHub
|
e1008269ce
|
Update OSSEC output
|
2020-04-01 15:00:52 -04:00 |
|
|
weslambertandGitHub
|
9f58081ce8
|
Typo
|
2020-04-01 14:57:47 -04:00 |
|
|
weslambertandGitHub
|
d0ad7e7ef9
|
Update config for search pipeline
|
2020-04-01 14:57:32 -04:00 |
|
|
weslambertandGitHub
|
5c433c39e5
|
Merge pull request #492 from Security-Onion-Solutions/fix/strelka-zeek-extracted-sync
Add Zeek extracted file sync
|
2020-04-01 14:20:36 -04:00 |
|
|
weslambertandGitHub
|
cc4b1bf936
|
Add Zeek extracted file sync
|
2020-04-01 14:19:36 -04:00 |
|
|
weslambertandGitHub
|
df00405265
|
Merge pull request #491 from Security-Onion-Solutions/fix/strelka_init
Remove restart policy
|
2020-04-01 13:19:57 -04:00 |
|
|
weslambertandGitHub
|
5173da5a33
|
Remove restart policy
|
2020-04-01 13:19:31 -04:00 |
|
|
weslambertandGitHub
|
44ae4604b5
|
Merge pull request #489 from Security-Onion-Solutions/fix/strelka-curly
Fix curly brace
|
2020-04-01 12:33:02 -04:00 |
|
|
weslambertandGitHub
|
7390063026
|
Fix curly brace
|
2020-04-01 12:32:29 -04:00 |
|
|
weslambertandGitHub
|
92c714ea4c
|
Merge pull request #488 from Security-Onion-Solutions/fix/strelka_top
Update Eval for Strelka
|
2020-04-01 11:42:18 -04:00 |
|
|
weslambertandGitHub
|
2fcfb06ba5
|
Update Eval for Strelka
|
2020-04-01 11:41:56 -04:00 |
|
|
weslambertandGitHub
|
3001abc3ea
|
Merge pull request #487 from Security-Onion-Solutions/fix/elastic_fixes
Fix/elastic fixes
|
2020-04-01 11:32:22 -04:00 |
|
|
weslambertandGitHub
|
f13093dc51
|
Add message rename
|
2020-04-01 11:31:57 -04:00 |
|
|
weslambertandGitHub
|
26efad1c45
|
Update Strelka log path
|
2020-04-01 11:30:02 -04:00 |
|
|
weslambertandGitHub
|
9f44a86ae4
|
Merge pull request #485 from Security-Onion-Solutions/strelka_enable
Enable Strelka via Setup
|
2020-04-01 10:08:09 -04:00 |
|
|
Wes Lambert
|
2164de97b5
|
Enable Strelka via Setup
|
2020-04-01 14:06:19 +00:00 |
|
|
weslambertandGitHub
|
fd6832bf51
|
Merge pull request #483 from Security-Onion-Solutions/elastic_config
template and kibana config updates
|
2020-04-01 09:15:10 -04:00 |
|
|
Wes Lambert
|
33512eca2a
|
template and kibana config updates
|
2020-04-01 13:14:13 +00:00 |
|
|
weslambertandGitHub
|
a6b3e0e4a8
|
Merge pull request #482 from Security-Onion-Solutions/fix/strelka_config
add strelka index
|
2020-04-01 09:04:35 -04:00 |
|
|
Wes Lambert
|
6cc757e1de
|
add strelka index
|
2020-04-01 13:02:36 +00:00 |
|
|
weslambertandGitHub
|
d8f30a0240
|
Merge pull request #481 from Security-Onion-Solutions/fix/strelka_stuff
Fix/strelka stuff
|
2020-04-01 09:00:07 -04:00 |
|
|
Wes Lambert
|
70422809ec
|
add category
|
2020-04-01 12:59:10 +00:00 |
|
|
Wes Lambert
|
9bbcc185aa
|
change Strelka log location
|
2020-04-01 12:57:51 +00:00 |
|
|
weslambertandGitHub
|
fd00cdf8f3
|
Merge pull request #473 from Security-Onion-Solutions/more_elastic_stuff
More elastic stuff
|
2020-03-30 20:41:56 -04:00 |
|
|
Wes Lambert
|
68138e009a
|
update FB config
|
2020-03-31 00:37:58 +00:00 |
|
|
Wes Lambert
|
5226ec1560
|
update Kibana config/dashboards/etc
|
2020-03-31 00:37:17 +00:00 |
|
|
Wes Lambert
|
eacd3c9bfd
|
update zeek.common
|
2020-03-31 00:36:42 +00:00 |
|
|
weslambertandGitHub
|
9758563967
|
Merge pull request #470 from Security-Onion-Solutions/ecs_community_id
add community_id parsing for ingest
|
2020-03-30 11:51:05 -04:00 |
|
|
Wes Lambert
|
ad50093315
|
add community_id parsing for ingest
|
2020-03-30 15:49:36 +00:00 |
|
|
weslambertandGitHub
|
ee4e3c0659
|
Merge pull request #469 from Security-Onion-Solutions/fix/ingest_stuff
update wazuh fields and category
|
2020-03-30 10:24:43 -04:00 |
|
|
Wes Lambert
|
93c3c86e2f
|
update wazuh fields and category
|
2020-03-30 14:24:01 +00:00 |
|
|
weslambertandGitHub
|
b6db36723d
|
Merge pull request #467 from Security-Onion-Solutions/fix/kibana_config_update
update Kibana json config
|
2020-03-30 10:21:18 -04:00 |
|
|
Wes Lambert
|
70bc35eb7e
|
update Kibana json config
|
2020-03-30 14:20:06 +00:00 |
|
|
weslambertandGitHub
|
b59fc5b77e
|
Merge pull request #457 from Security-Onion-Solutions/fix/more_ossec_fields
fix ossec fields
|
2020-03-24 11:44:45 -04:00 |
|
|
Wes Lambert
|
ef808875f4
|
fix ossec fields
|
2020-03-24 15:42:31 +00:00 |
|
|
weslambertandGitHub
|
239e0a0cb6
|
Merge pull request #456 from Security-Onion-Solutions/kibana_disable_telem
Disable telemetry
|
2020-03-24 10:20:51 -04:00 |
|
|
weslambertandGitHub
|
fef0185e90
|
Disable telemetry
|
2020-03-24 10:18:39 -04:00 |
|
|
weslambertandGitHub
|
81a481022c
|
Merge pull request #455 from Security-Onion-Solutions/fix/zeek_weird_ingest
add some more fields
|
2020-03-23 23:44:47 -04:00 |
|
|
Wes Lambert
|
083c588a87
|
add some more fields
|
2020-03-24 03:43:31 +00:00 |
|
|
weslambertandGitHub
|
a01b0e44e1
|
Merge pull request #454 from Security-Onion-Solutions/es_template_fix
Add message field
|
2020-03-23 23:39:44 -04:00 |
|
|
weslambertandGitHub
|
ece7e139f2
|
Add message
|
2020-03-23 23:39:15 -04:00 |
|
|
weslambertandGitHub
|
126913e41b
|
Merge pull request #453 from Security-Onion-Solutions/fix/kibana_config_load
Fix/kibana config load
|
2020-03-23 23:24:09 -04:00 |
|
|
weslambertandGitHub
|
f5e932ab58
|
Re-enable load script
|
2020-03-23 23:23:32 -04:00 |
|
|
weslambertandGitHub
|
1a44b744f7
|
Update so-kibana-config-load
|
2020-03-23 23:23:04 -04:00 |
|
|
weslambertandGitHub
|
1c153b9081
|
Fix path
|
2020-03-23 23:09:00 -04:00 |
|
|
weslambertandGitHub
|
5207ca71c9
|
Merge pull request #452 from Security-Onion-Solutions/fix/remove_dupe
Update init.sls
|
2020-03-23 17:07:50 -04:00 |
|
|
weslambertandGitHub
|
951a087c20
|
Update init.sls
|
2020-03-23 17:07:18 -04:00 |
|
|
weslambertandGitHub
|
2ae3ff7490
|
Merge pull request #451 from Security-Onion-Solutions/fix/saved_objects_config
Fix/saved objects config
|
2020-03-23 15:58:20 -04:00 |
|
|
Wes Lambert
|
0b6ff18a0d
|
change default route
|
2020-03-23 19:57:41 +00:00 |
|
|
Wes Lambert
|
fe0ab0965a
|
move saved_objects
|
2020-03-23 19:55:07 +00:00 |
|
|
weslambertandGitHub
|
79feee1dd1
|
Merge pull request #449 from Security-Onion-Solutions/fix/kibana_master
Fix master and remark config load
|
2020-03-23 15:36:38 -04:00 |
|
|
weslambertandGitHub
|
8edecfceb9
|
Fix master and remark config load
|
2020-03-23 15:36:12 -04:00 |
|
|
weslambertandGitHub
|
c8345753ac
|
Merge pull request #447 from Security-Onion-Solutions/fix/kibana_state
Fix/kibana state
|
2020-03-23 15:17:04 -04:00 |
|
|
weslambertandGitHub
|
8e9cffad4a
|
Update init.sls
|
2020-03-23 15:15:05 -04:00 |
|
|
weslambertandGitHub
|
2a5ab3492d
|
Update init.sls
|
2020-03-23 15:14:42 -04:00 |
|