Mike Reeves 1bcf80dd10 Group by assessment without a missing bucket ...

The assessment is a number, and SOC's missing bucket only works on keyword
fields, so the * made Elasticsearch fail parsing "__missing__" as a long.
Untriaged alerts now drop out of this view.

2026-10-13 17:11:49 -04:00

..

_beacons

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

_modules

…

_runners

…

backup

use so-config-backup script in soup

2026-06-01 11:52:35 -05:00

bpf

…

ca

…

common

upgrade docker to 29.8.1 and containerd.io to 2.3.6

2026-10-02 12:03:04 -04:00

cron

…

desktop

…

docker

upgrade docker to 29.8.1 and containerd.io to 2.3.6

2026-10-02 12:03:04 -04:00

docker_clean

…

elastalert

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

elastic-fleet-package-registry

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

elasticagent

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

elasticfleet

Merge pull request #16278 from Security-Onion-Solutions/evtx-import-datastreams

2026-10-02 13:30:57 -04:00

elasticsearch

Merge pull request #16278 from Security-Onion-Solutions/evtx-import-datastreams

2026-10-02 13:30:57 -04:00

firewall

Isolate the Kratos admin API on a dedicated soauth docker network

2026-09-09 16:09:00 -04:00

global

Move global.push config to salt.auto_apply

2026-06-24 15:17:48 -04:00

healthcheck

…

host

…

hydra

Isolate the Hydra admin API on the soauth docker network

2026-09-17 16:58:49 -04:00

hypervisor

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

idh

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

influxdb

FIX: remove the docker socket from so-telegraf

2026-09-24 14:30:25 -04:00

kafka

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

kibana

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

kratos

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

libvirt

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

logrotate

Merge remote-tracking branch 'origin/3/dev' into rotatehype

2026-08-28 09:26:36 -04:00

logstash

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

manager

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

motd

…

nginx

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

ntp

…

orch

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

patch

…

pcap

…

pipeline

…

postgres

Merge pull request #16189 from Security-Onion-Solutions/jertel/wip

2026-08-25 09:52:49 -04:00

reactor

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

redis

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

registry

ensure restart_policy is below image

2026-07-15 11:04:51 -04:00

repo/client

add missing comma

2026-10-02 12:03:04 -04:00

salt

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

sensor

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

sensoroni

force transitive dep version

2026-09-22 08:28:44 -04:00

setup/virt

Write setup-complete marker on non-manager nodes

2026-08-19 11:39:47 -04:00

soc

Group by assessment without a missing bucket

2026-10-13 17:11:49 -04:00

ssl

…

stig

Revert "patch issue with fs.protected_symlinks"

2026-08-27 09:21:57 -05:00

storage

…

strelka

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

suricata

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

systemd

…

tcpreplay

…

telegraf

FIX: remove the docker socket from so-telegraf

2026-09-24 14:30:25 -04:00

vars

Isolate the Hydra admin API on the soauth docker network

2026-09-17 16:58:49 -04:00

versionlock

…

vm

…

zeek

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

allowed_states.map.jinja

remove outdated eval script and associated salt utility state

2026-07-01 11:12:39 -05:00

top.sls

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-07-02 10:27:54 -04:00