CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-09-21 23:24:34 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
516634ef8dddb4bb793f045b04fceee07d0a8a7f
securityonion/salt/elasticsearch/files/ingest
T
History
Wes Lambert 875908dc90 Set @timestamp to winlog.systemTime
2021-01-06 16:47:35 +00:00
..
beats.common
initial refactor - beats/sysmon parsing
2020-07-28 11:03:33 -04:00
common
Fix common pipeline field removal so won't fail for missing fields
2020-10-14 13:55:24 +00:00
common.nids
Change rule_ruleset to rule.ruleset
2020-10-20 22:14:23 -04:00
filterlog
Add Community ID to pfsense filterlog #1501
2020-10-10 08:11:51 -04:00
import.wel
Add event.category to WEL
2020-09-10 06:15:30 -04:00
osquery.query_result
fix for Windows events via osquery
2020-10-29 15:03:13 -04:00
ossec
Prevent Wazuh "last -n 20" logs from going to Alerts queue #2321
2020-12-12 11:35:29 -05:00
strelka.file
Pull out additional fields from Exif info
2020-11-09 16:53:53 +00:00
suricata.alert
Update common.nids
2020-10-07 15:14:08 +00:00
suricata.common
explicitly set Suricata timestamp timezone to UTC
2020-07-14 15:49:46 -04:00
suricata.dhcp
…
suricata.dnp3
…
suricata.dns
…
suricata.fileinfo
…
suricata.flow
…
suricata.ftp
…
suricata.ftp_data
Add initial suricata.ftp_data pipeline
2020-12-10 14:14:50 +00:00
suricata.http
…
suricata.ikev2
…
suricata.krb5
…
suricata.nfs
…
suricata.rdp
…
suricata.sip
…
suricata.smb
…
suricata.smtp
…
suricata.snmp
…
suricata.ssh
…
suricata.tftp
…
suricata.tls
…
syslog
Syslog updates
2020-11-13 16:06:22 +00:00
sysmon
Cleanup & fix sysmon pid ingest
2020-11-14 16:19:23 -05:00
win.eventlogs
Set @timestamp to winlog.systemTime
2021-01-06 16:47:35 +00:00
zeek.common
Ensure Zeek logs without ts field have an @timestamp field associated
2020-10-12 17:19:23 +00:00
zeek.common_ssl
…
zeek.conn
…
zeek.dce_rpc
…
zeek.dhcp
…
zeek.dnp3
…
zeek.dns
…
zeek.dns.tld
…
zeek.dpd
…
zeek.files
remove duplicate line for message2.conn_uids
2020-07-09 06:44:08 -04:00
zeek.ftp
…
zeek.http
…
zeek.intel
Fix Elasticsearch parsing for Zeek Intel Indicator #1309
2020-09-10 06:41:19 -04:00
zeek.irc
…
zeek.kerberos
Addl krb fix
2020-06-30 03:06:01 +00:00
zeek.modbus
…
zeek.mysql
…
zeek.notice
…
zeek.ntlm
…
zeek.pe
…
zeek.radius
…
zeek.rdp
…
zeek.rfb
…
zeek.signatures
…
zeek.sip
…
zeek.smb_files
…
zeek.smb_mapping
…
zeek.smtp
…
zeek.snmp
…
zeek.socks
…
zeek.software
…
zeek.ssh
…
zeek.ssl
…
zeek.syslog
…
zeek.tunnel
…
zeek.tunnels
Let zeek.common handle common fields for zeek.tunnels
2020-10-06 20:12:23 +00:00
zeek.weird
…
zeek.x509
…