CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 02:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
2ffb723bbd77c3669687b13a42d8029e8b2d98a7
securityonion/salt/logstash/pipelines/config/so
History
William Wernert 33bd6aed20 Fix logscan pipeline on eval 
* Rename logscan pipeline to logscan.alert
* Add module to indices array in filebeat.yml
2021-07-30 14:41:15 -04:00
..
0008_input_fleet_livequery.conf.jinja
Initial support for Live Queries in Hunt
2021-03-04 18:21:13 -05:00
0009_input_beats.conf
Dynamix Pipelines take 2
2021-06-10 09:19:15 -04:00
0010_input_hhbeats.conf
remark Beat tag for now
2020-05-16 14:59:41 +00:00
0800_input_eval.conf
update config
2020-03-11 12:13:11 +00:00
0899_input_minio.conf.jinja
Add tuneable to the global pillar
2020-08-05 22:47:12 -04:00
0900_input_redis.conf.jinja
use heavynode hostname for certs if heavynode. changes to logstash pipeline for redis if heavynode
2021-07-06 15:32:39 -04:00
1000_preprocess_log_elapsed.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1001_preprocess_syslogng.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1002_preprocess_json.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1004_preprocess_syslog_types.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1026_preprocess_dhcp.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1029_preprocess_esxi.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1030_preprocess_greensql.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1031_preprocess_iis.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1032_preprocess_mcafee.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1033_preprocess_snort.conf
Begin switch to ECS for Suricata
2020-03-02 19:07:40 +00:00
1034_preprocess_syslog.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1100_preprocess_bro_conn.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1101_preprocess_bro_dhcp.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1102_preprocess_bro_dns.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1103_preprocess_bro_dpd.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1104_preprocess_bro_files.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1105_preprocess_bro_ftp.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1106_preprocess_bro_http.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1107_preprocess_bro_irc.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1108_preprocess_bro_kerberos.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1109_preprocess_bro_notice.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1110_preprocess_bro_rdp.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1111_preprocess_bro_signatures.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1112_preprocess_bro_smtp.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1113_preprocess_bro_snmp.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1114_preprocess_bro_software.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1115_preprocess_bro_ssh.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1116_preprocess_bro_ssl.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1117_preprocess_bro_syslog.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1118_preprocess_bro_tunnel.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1119_preprocess_bro_weird.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1121_preprocess_bro_mysql.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1122_preprocess_bro_socks.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1123_preprocess_bro_x509.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1124_preprocess_bro_intel.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1125_preprocess_bro_modbus.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1126_preprocess_bro_sip.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1127_preprocess_bro_radius.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1128_preprocess_bro_pe.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1129_preprocess_bro_rfb.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1130_preprocess_bro_dnp3.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1131_preprocess_bro_smb_files.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1132_preprocess_bro_smb_mapping.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1133_preprocess_bro_ntlm.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
1134_preprocess_bro_dce_rpc.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
2000_network_flow.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6000_bro.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6001_bro_import.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6002_syslog.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6101_switch_brocade.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6200_firewall_fortinet.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6201_firewall_pfsense.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6300_windows.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6301_dns_windows.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6400_suricata.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6500_ossec.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6501_ossec_sysmon.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6502_ossec_autoruns.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6600_winlogbeat_sysmon.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
6700_winlogbeat.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
7100_osquery_wel.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
7200_strelka.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8000_postprocess_bro_cleanup.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8001_postprocess_common_ip_augmentation.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8006_postprocess_dns.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8007_postprocess_http.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8200_postprocess_tagging.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8998_postprocess_log_elapsed.conf
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
8999_postprocess_rename_type.conf
update config
2020-03-11 12:13:11 +00:00
9000_output_zeek.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9002_output_import.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9004_output_flow.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9033_output_snort.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9034_output_syslog.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9050_output_filebeatmodules.conf.jinja
Only route to FB module pipeline if filebeat in metadata
2021-07-13 11:36:18 -04:00
9100_output_osquery.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9101_output_osquery_livequery.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9200_output_firewall.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9400_output_suricata.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9500_output_beats.conf.jinja
Check if Filebeat modules are being used for incoming Beats
2021-07-19 12:57:42 -04:00
9600_output_ossec.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9700_output_strelka.conf.jinja
Elastic auth: Fun with Salt
2021-06-16 17:52:22 -04:00
9800_output_logscan.conf.jinja
Fix logscan pipeline on eval
2021-07-30 14:41:15 -04:00
9997_output_helix.conf.jinja
pillarize logstash config,parsers,templates and docker port bindings
2020-02-25 17:44:32 -05:00
9998_output_minio.conf.jinja
bucket stuff
2020-08-07 22:51:52 -04:00
9999_output_redis.conf.jinja
use heavynode hostname for certs if heavynode. changes to logstash pipeline for redis if heavynode
2021-07-06 15:32:39 -04:00