weslambertandGitHub 3be0d05eea Update field removal based on HTTP input changes

2021-10-25 13:16:30 -04:00

..

0008_input_fleet_livequery.conf.jinja

…

0009_input_beats.conf

…

0010_input_hhbeats.conf

…

0011_input_endgame.conf

Rename default headers and host for HTTP input

2021-10-25 13:15:20 -04:00

0800_input_eval.conf

…

0899_input_minio.conf.jinja

…

0900_input_redis.conf.jinja

use heavynode hostname for certs if heavynode. changes to logstash pipeline for redis if heavynode

2021-07-06 15:32:39 -04:00

1000_preprocess_log_elapsed.conf

…

1001_preprocess_syslogng.conf

…

1002_preprocess_json.conf

…

1004_preprocess_syslog_types.conf

…

1026_preprocess_dhcp.conf

…

1029_preprocess_esxi.conf

…

1030_preprocess_greensql.conf

…

1031_preprocess_iis.conf

…

1032_preprocess_mcafee.conf

…

1033_preprocess_snort.conf

…

1034_preprocess_syslog.conf

…

1100_preprocess_bro_conn.conf

…

1101_preprocess_bro_dhcp.conf

…

1102_preprocess_bro_dns.conf

…

1103_preprocess_bro_dpd.conf

…

1104_preprocess_bro_files.conf

…

1105_preprocess_bro_ftp.conf

…

1106_preprocess_bro_http.conf

…

1107_preprocess_bro_irc.conf

…

1108_preprocess_bro_kerberos.conf

…

1109_preprocess_bro_notice.conf

…

1110_preprocess_bro_rdp.conf

…

1111_preprocess_bro_signatures.conf

…

1112_preprocess_bro_smtp.conf

…

1113_preprocess_bro_snmp.conf

…

1114_preprocess_bro_software.conf

…

1115_preprocess_bro_ssh.conf

…

1116_preprocess_bro_ssl.conf

…

1117_preprocess_bro_syslog.conf

…

1118_preprocess_bro_tunnel.conf

…

1119_preprocess_bro_weird.conf

…

1121_preprocess_bro_mysql.conf

…

1122_preprocess_bro_socks.conf

…

1123_preprocess_bro_x509.conf

…

1124_preprocess_bro_intel.conf

…

1125_preprocess_bro_modbus.conf

…

1126_preprocess_bro_sip.conf

…

1127_preprocess_bro_radius.conf

…

1128_preprocess_bro_pe.conf

…

1129_preprocess_bro_rfb.conf

…

1130_preprocess_bro_dnp3.conf

…

1131_preprocess_bro_smb_files.conf

…

1132_preprocess_bro_smb_mapping.conf

…

1133_preprocess_bro_ntlm.conf

…

1134_preprocess_bro_dce_rpc.conf

…

2000_network_flow.conf

…

6000_bro.conf

…

6001_bro_import.conf

…

6002_syslog.conf

…

6101_switch_brocade.conf

…

6200_firewall_fortinet.conf

…

6201_firewall_pfsense.conf

…

6300_windows.conf

…

6301_dns_windows.conf

…

6400_suricata.conf

…

6500_ossec.conf

…

6501_ossec_sysmon.conf

…

6502_ossec_autoruns.conf

…

6600_winlogbeat_sysmon.conf

…

6700_winlogbeat.conf

…

7100_osquery_wel.conf

…

7200_strelka.conf

…

8000_postprocess_bro_cleanup.conf

…

8001_postprocess_common_ip_augmentation.conf

…

8006_postprocess_dns.conf

…

8007_postprocess_http.conf

…

8200_postprocess_tagging.conf

…

8998_postprocess_log_elapsed.conf

…

8999_postprocess_rename_type.conf

…

9000_output_zeek.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9002_output_import.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9004_output_flow.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9033_output_snort.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9034_output_syslog.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9050_output_filebeatmodules.conf.jinja

Only route to FB module pipeline if filebeat in metadata

2021-07-13 11:36:18 -04:00

9100_output_osquery.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9101_output_osquery_livequery.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9200_output_firewall.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9400_output_suricata.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9500_output_beats.conf.jinja

Check if Filebeat modules are being used for incoming Beats

2021-07-19 12:57:42 -04:00

9600_output_ossec.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9700_output_strelka.conf.jinja

Elastic auth: Fun with Salt

2021-06-16 17:52:22 -04:00

9800_output_logscan.conf.jinja

Fix logscan pipeline on eval

2021-07-30 14:41:15 -04:00

9900_output_endgame.conf.jinja

Update field removal based on HTTP input changes

2021-10-25 13:16:30 -04:00

9997_output_helix.conf.jinja

…

9998_output_minio.conf.jinja

…

9999_output_redis.conf.jinja

use heavynode hostname for certs if heavynode. changes to logstash pipeline for redis if heavynode

2021-07-06 15:32:39 -04:00