Mike Reeves
12da7db22c
Attempt to fix 2.3 when main repo changes
2024-04-03 15:38:23 -04:00
m0duspwnens
1b8584d4bb
allow manager to manager on kafka ports
2024-04-03 15:36:35 -04:00
Mike Reeves
9c59f42c16
Attempt to fix 2.3 when main repo changes
2024-04-03 15:23:09 -04:00
coreyogburn
fb5eea8284
Merge pull request #12744 from Security-Onion-Solutions/cogburn/detection-state
...
Update SOC Config with State File Paths
2024-04-03 13:19:26 -06:00
Mike Reeves
9db9af27ae
Attempt to fix 2.3 when main repo changes
2024-04-03 15:14:50 -04:00
Corey Ogburn
0f50a265cf
Update SOC Config with State File Paths
...
Each detection engine is getting a state file to help manage the timer over restarts. By default, the files will go in soc's config folder inside a fingerprints folder.
2024-04-03 13:12:18 -06:00
Jason Ertel
3e05c04aa1
Merge pull request #12731 from Security-Onion-Solutions/jertel/ana
...
SOC Telemetry
2024-04-03 14:51:41 -04:00
Jason Ertel
8f8896c505
fix link
2024-04-03 14:45:39 -04:00
Jason Ertel
941a841da0
fix link
2024-04-03 14:41:57 -04:00
reyesj2
13105c4ab3
Generate certs for use with elasticfleet kafka output policy
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-04-03 14:34:07 -04:00
reyesj2
dc27bbb01d
Set kafka heap size. To be later configured from SOC
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-04-03 14:30:52 -04:00
Jason Ertel
2b8a051525
fix link
2024-04-03 14:30:09 -04:00
Mike Reeves
1c7cc8dd3b
Merge pull request #12741 from Security-Onion-Solutions/metrics
...
Change code to allow for non root
2024-04-03 12:56:17 -04:00
Doug Burks
58d081eed1
Merge pull request #12742 from Security-Onion-Solutions/dougburks-patch-1
...
FEATURE: Add Events table columns for event.module kratos #12740
2024-04-03 12:48:24 -04:00
Doug Burks
9078b2bad2
FEATURE: Add Events table columns for event.module kratos #12740
2024-04-03 12:46:29 -04:00
Mike Reeves
8889c974b8
Change code to allow for non root
2024-04-03 12:38:59 -04:00
Doug Burks
f615a73120
Merge pull request #12739 from Security-Onion-Solutions/dougburks-patch-1
...
FEATURE: Add dashboard for SOC Login Failures #12738
2024-04-03 12:01:08 -04:00
Doug Burks
66844af1c2
FEATURE: Add dashboard for SOC Login Failures #12738
2024-04-03 11:54:53 -04:00
Mike Reeves
a0b7d89eb6
Merge pull request #12734 from Security-Onion-Solutions/metrics
...
Add Elastic Agent Status Metrics
2024-04-03 11:12:53 -04:00
Mike Reeves
c31e459c2b
Change metrics reporting order
2024-04-03 11:06:00 -04:00
m0duspwnens
b863060df1
kafka broker and listener on 0.0.0.0
2024-04-03 11:05:24 -04:00
weslambert
d96d696c35
Merge pull request #12735 from Security-Onion-Solutions/feature/cef
...
Add cef
2024-04-03 10:49:44 -04:00
Wes
105eadf111
Add cef
2024-04-03 14:40:41 +00:00
Jason Ertel
ca57c20691
suppress soup update output for cleaner console
2024-04-03 10:31:24 -04:00
Jason Ertel
c4767bfdc8
suppress soup update output for cleaner console
2024-04-03 10:28:43 -04:00
Mike Reeves
0de1f76139
add agent count to reposync
2024-04-03 10:26:59 -04:00
Jason Ertel
5f4a0fdfad
suppress soup update output for cleaner console
2024-04-03 10:26:48 -04:00
m0duspwnens
18f95e867f
port 9093 for kafka docker
2024-04-03 10:24:53 -04:00
m0duspwnens
ed6137a76a
allow sensor and searchnode to connect to manager kafka ports
2024-04-03 10:24:10 -04:00
m0duspwnens
c3f02a698e
add kafka nodes as extra hosts for the container
2024-04-03 10:23:36 -04:00
m0duspwnens
db106f8ca1
listen on 0.0.0.0 for CONTROLLER
2024-04-03 10:22:47 -04:00
Jason Ertel
c712529cf6
suppress soup update output for cleaner console
2024-04-03 10:21:35 -04:00
Mike Reeves
976ddd3982
add agentstatus to telegraf
2024-04-03 10:06:08 -04:00
Mike Reeves
64748b98ad
add agentstatus to telegraf
2024-04-03 09:56:12 -04:00
Mike Reeves
3335612365
add agentstatus to telegraf
2024-04-03 09:54:16 -04:00
Mike Reeves
513273c8c3
add agentstatus to telegraf
2024-04-03 09:43:55 -04:00
Mike Reeves
0dfde3c9f2
add agentstatus to telegraf
2024-04-03 09:40:14 -04:00
Mike Reeves
0efdcfcb52
add agentstatus to telegraf
2024-04-03 09:36:02 -04:00
Josh Brower
fbdcc53fe0
Merge pull request #12732 from Security-Onion-Solutions/2.4/detections-defaults
...
Feature - auto-enabled Sigma rules
2024-04-03 09:01:09 -04:00
m0duspwnens
8e47cc73a5
kafka.nodes pillar to lf
2024-04-03 08:54:17 -04:00
m0duspwnens
639bf05081
add so-manager to kafka.nodes pillar
2024-04-03 08:52:26 -04:00
Jason Ertel
c1b5ef0891
ensure so-yaml.py is updated during soup
2024-04-03 08:44:40 -04:00
DefensiveDepth
a8f25150f6
Feature - auto-enabled Sigma rules
2024-04-03 08:21:50 -04:00
Jason Ertel
1ee2a6d37b
Improve wording for Airgap annotation
2024-04-03 08:21:30 -04:00
Mike Reeves
f64d9224fb
Merge branch '2.4/dev' of github.com:Security-Onion-Solutions/securityonion into metrics
2024-04-02 17:22:20 -04:00
m0duspwnens
4e142e0212
put alphabetical
2024-04-02 16:47:35 -04:00
m0duspwnens
c9bf1c86c6
Merge remote-tracking branch 'origin/reyesj2/kafka' into kaffytaffy
2024-04-02 16:40:47 -04:00
reyesj2
82830c8173
Fix typos and fix error related to elasticsearch saltstate being called from logstash state. Logstash will be removed from kafkanodes in future
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-04-02 16:37:39 -04:00
reyesj2
7f5741c43b
Fix kafka storage setup
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-04-02 16:36:22 -04:00
reyesj2
643d4831c1
CRLF -> LF
...
Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com >
2024-04-02 16:35:14 -04:00
