William Wernert 33bd6aed20 Fix logscan pipeline on eval ...

* Rename logscan pipeline to logscan.alert
* Add module to indices array in filebeat.yml

2021-07-30 14:41:15 -04:00

..

_beacons

…

_modules

…

ca

…

common

Correct mod_so_status to only act on single string

2021-07-30 11:05:48 -04:00

curator

Use http_auth instead of username/password until Curator is upgraded to next version

2021-07-19 12:42:46 -04:00

deprecated-launcher

…

docker

…

docker_clean

…

domainstats

…

elastalert

esalerter ES creds fix

2021-06-21 10:50:09 -04:00

elasticsearch

Fix logscan pipeline on eval

2021-07-30 14:41:15 -04:00

filebeat

Fix logscan pipeline on eval

2021-07-30 14:41:15 -04:00

firewall

…

fleet

…

freqserver

…

grafana

remove old dashboards, set default refresh to 5m

2021-07-27 10:23:35 -04:00

healthcheck

…

idstools

…

influxdb

update cq

2021-06-29 17:15:00 -04:00

kibana

fix merge and defaults passed

2021-07-28 09:58:38 -04:00

learn

Remove or run logscan based on enabled bool

2021-07-29 15:14:54 -04:00

logstash

Fix logscan pipeline on eval

2021-07-30 14:41:15 -04:00

manager

Ensure empty/aborted users/roles files do not get copied onto final filenames

2021-06-08 11:03:56 -04:00

minio

…

motd

…

mysql

…

nginx

Merge branch 'master' into kilo

2021-07-27 14:40:31 -04:00

nodered

…

patch

fix the hours get

2021-07-29 10:59:33 -04:00

pcap

change container to abesent of pcap is disabled

2021-07-26 10:08:59 -04:00

pipeline

…

playbook

…

reactor

…

redis

…

registry

change to client_timeout

2021-06-22 09:54:25 -04:00

repo/client

…

salt

remove the salt-minion check for schedules

2021-06-21 08:56:24 -04:00

sensoroni

Add ID Fix to nodeID

2021-04-29 11:49:20 -04:00

soc

Update release notes link to match top right menu for airgap

2021-07-22 09:48:34 -04:00

soctopus

Remove unused mode

2021-06-18 14:34:42 -04:00

ssl

common name changes, allow cert to be managed regardless of expire date for heavy node

2021-07-07 10:22:37 -04:00

strelka

…

suricata

remove space

2021-06-16 08:07:28 -04:00

systemd

…

tcpreplay

…

telegraf

remove role from node_config for telegraf

2021-07-21 14:32:01 -04:00

thehive

change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679

2021-01-20 15:09:53 -05:00

utility

Due to dir ownership restrictions need to run crossthestreams and eval as root

2021-06-06 16:36:35 -04:00

wazuh

…

yum

…

zeek

https://github.com/Security-Onion-Solutions/securityonion/issues/4024

2021-07-27 16:16:48 -04:00

allowed_states.map.jinja

Add learn to allowed states

2021-07-28 09:49:59 -04:00

schedule.sls

remove the salt-minion check for schedules

2021-06-21 08:56:24 -04:00

top.sls

[wip] Initial work to enable/disable "learn" modules

2021-07-26 14:24:10 -04:00