CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-03-02 10:56:52 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
7442ffc7d8f4afdc50e0e4108ccc56bb6d29ad5e
securityonion/salt/elasticsearch/templates/component/elastic-agent
History
Wes 70c5a07913 Add back meta ad error.message
2024-09-23 21:36:40 +00:00
..
logs-1password.item_usages@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-1password.signin_attempts@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-apache.access@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-apache.error@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-auditd.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-auth0.logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.cloudfront_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.cloudtrail@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.cloudwatch_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.ec2_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.elb_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.firewall_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.guardduty@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.inspector@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.route53_public_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.route53_resolver_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.s3access@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.securityhub_findings@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.securityhub_insights@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.vpcflow@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-aws.waf@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.activitylogs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.application_gateway@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.auditlogs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.eventhub@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.firewall_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.identity_protection@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.platformlogs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.provisioning@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.signinlogs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-azure.springcloudlogs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-barracuda_cloudgen_firewall.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-barracuda.waf@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-carbonblack_edr.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cef.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-checkpoint.firewall@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_asa.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_duo.admin@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_duo.auth@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_duo.offline_enrollment@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_duo.summary@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_duo.telephony@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_ftd.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_ios.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_ise.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_meraki.events@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_meraki.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cisco_umbrella.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-citrix_adc.interface@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-citrix_adc.lbvserver@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-citrix_adc.service@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-citrix_adc.system@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-citrix_adc.vpn@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-citrix_waf.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cloudflare.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-cloudflare.logpull@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-crowdstrike.falcon@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-crowdstrike.fdr@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-darktrace.ai_analyst_alert@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-darktrace.model_breach_alert@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-darktrace.system_status_alert@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.apm_server@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.auditbeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.cloudbeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.endpoint_security@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.filebeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.fleet_server@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.heartbeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.metricbeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.osquerybeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent.packetbeat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-elastic_agent@custom.json
Add back meta
2024-09-23 20:12:14 +00:00
logs-elastic_agent@package.json
…
logs-endpoint.alerts@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.diagnostic.collection@custom.json
Add back meta
2024-09-23 20:12:14 +00:00
logs-endpoint.diagnostic.collection@package.json
…
logs-endpoint.events.api@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.events.file@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.events.library@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.events.network@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.events.process@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.events.registry@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-endpoint.events.security@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-f5_bigip.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fim.event@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fireeye.nx@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fortinet_fortigate.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fortinet.clientendpoint@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fortinet.firewall@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fortinet.fortimail@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-fortinet.fortimanager@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-gcp.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-gcp.dns@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-gcp.firewall@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-gcp.loadbalancing_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-gcp.vpcflow@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-github.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-github.code_scanning@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-github.dependabot@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-github.issues@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-github.secret_scanning@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.access_transparency@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.admin@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.alert@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.context_aware_access@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.device@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.drive@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.gcp@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.group_enterprise@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.groups@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.login@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.rules@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.saml@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.token@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-google_workspace.user_accounts@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-http_endpoint.generic@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-httpjson.generic@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-iis.access@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-iis.error@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-imperva_cloud_waf.event@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-juniper_srx.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-juniper.junos@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-juniper.netscreen@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-juniper.srx@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-kafka_log.generic@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-lastpass.detailed_shared_folder@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-lastpass.event_report@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-lastpass.user@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-m365_defender.event@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-m365_defender.incident@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-m365_defender.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-microsoft_defender_endpoint.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-microsoft_dhcp.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-microsoft_sqlserver.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-microsoft_sqlserver.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.audit_events@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.dlp_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.siem_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.threat_intel_malware_customer@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.threat_intel_malware_grid@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.ttp_ap_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.ttp_ip_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mimecast.ttp_url_logs@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mysql.error@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-mysql.slowlog@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-netflow.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-nginx.access@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-nginx.error@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-o365.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-okta.system@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-osquery_manager.action.responses.json
…
logs-osquery_manager.actions.json
…
logs-panw.panos@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-pfsense.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-proofpoint_tap.clicks_blocked@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-proofpoint_tap.clicks_permitted@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-proofpoint_tap.message_blocked@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-proofpoint_tap.message_delivered@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-pulse_connect_secure.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sentinel_one.activity@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sentinel_one.agent@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sentinel_one.alert@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sentinel_one.group@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sentinel_one.threat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-snort.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-snyk.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-snyk.vulnerabilities@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sonicwall_firewall.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sophos_central.alert@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sophos_central.event@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sophos.utm@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-sophos.xg@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-symantec_endpoint.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-system.application@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-system.auth@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-system.security@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-system.syslog@custom.json
Add back meta ad error.message
2024-09-23 21:36:40 +00:00
logs-system.system@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_io.asset@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_io.plugin@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_io.scan@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_io.vulnerability@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_sc.asset@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_sc.plugin@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-tenable_sc.vulnerability@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_abusech.malware@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_abusech.malwarebazaar@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_abusech.threatfox@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_abusech.url@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_anomali.threatstream@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_cybersixgill.threat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_misp.threat_attributes@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_misp.threat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_otx.pulses_subscribed@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_otx.threat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_recordedfuture.latest_ioc-template@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_recordedfuture.threat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-ti_threatq.threat@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-vsphere.log@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-windows.forwarded@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-windows.powershell_operational@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-windows.powershell@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-windows.sysmon_operational@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-winlog.winlog@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zia.alerts@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zia.dns@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zia.firewall@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zia.tunnel@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zia.web@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zpa.app_connector_status@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zpa.audit@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zpa.browser_access@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zpa.user_activity@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
logs-zscaler_zpa.user_status@custom.json
Add custom component for ints
2024-09-17 19:43:13 +00:00
metrics-fleet_server.agent_status@package.json
…
metrics-fleet_server.agent_versions@package.json
…
so-data-streams-mappings.json
…
so-fleet_agent_id_verification-1.json
…
so-fleet_globals-1.json
…
so-items-mappings.json
…
so-lists-mappings.json
…
so-logs-mappings.json
…
so-logs-settings.json
…