Mike Reeves 7469d833d1 Add a licensed Group By Assessment, Name alerts query ...

Groups alerts by the AI triage assessment, keeping untriaged alerts as a
missing bucket. Query entries take an optional license feature, which SOC uses
to hide this one on grids without OnionAI, and the query editor now shows it.

2026-10-06 21:14:25 -04:00

..

_beacons

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

_modules

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

_runners

merge 2.4/dev

2025-12-02 11:16:08 -06:00

backup

use so-config-backup script in soup

2026-06-01 11:52:35 -05:00

bpf

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

ca

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00

common

upgrade docker to 29.8.1 and containerd.io to 2.3.6

2026-10-02 12:03:04 -04:00

cron

…

desktop

the great ssl refactor

2025-12-11 17:30:06 -05:00

docker

upgrade docker to 29.8.1 and containerd.io to 2.3.6

2026-10-02 12:03:04 -04:00

docker_clean

prune images if so-docker-prune exists

2026-05-08 10:13:15 -04:00

elastalert

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

elastic-fleet-package-registry

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

elasticagent

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

elasticfleet

Merge pull request #16278 from Security-Onion-Solutions/evtx-import-datastreams

2026-10-02 13:30:57 -04:00

elasticsearch

Merge pull request #16278 from Security-Onion-Solutions/evtx-import-datastreams

2026-10-02 13:30:57 -04:00

firewall

Isolate the Kratos admin API on a dedicated soauth docker network

2026-09-09 16:09:00 -04:00

global

Move global.push config to salt.auto_apply

2026-06-24 15:17:48 -04:00

healthcheck

…

host

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

hydra

Isolate the Hydra admin API on the soauth docker network

2026-09-17 16:58:49 -04:00

hypervisor

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

idh

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

influxdb

FIX: remove the docker socket from so-telegraf

2026-09-24 14:30:25 -04:00

kafka

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

kibana

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

kratos

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

libvirt

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

logrotate

Merge remote-tracking branch 'origin/3/dev' into rotatehype

2026-08-28 09:26:36 -04:00

logstash

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

manager

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

motd

…

nginx

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

ntp

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

orch

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

patch

ensure bool sliders for patch

2026-03-19 14:39:10 -04:00

pcap

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00

pipeline

…

postgres

Merge pull request #16189 from Security-Onion-Solutions/jertel/wip

2026-08-25 09:52:49 -04:00

reactor

Revert "Fix/auto apply state queue"

2026-10-05 17:43:08 -04:00

redis

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

registry

ensure restart_policy is below image

2026-07-15 11:04:51 -04:00

repo/client

add missing comma

2026-10-02 12:03:04 -04:00

salt

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

sensor

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

sensoroni

force transitive dep version

2026-09-22 08:28:44 -04:00

setup/virt

Write setup-complete marker on non-manager nodes

2026-08-19 11:39:47 -04:00

soc

Add a licensed Group By Assessment, Name alerts query

2026-10-06 21:14:25 -04:00

ssl

dont remove ca in ssl.remove

2026-01-07 14:14:57 -05:00

stig

Revert "patch issue with fs.protected_symlinks"

2026-08-27 09:21:57 -05:00

storage

…

strelka

FIX: install /usr/sbin management scripts as root

2026-09-16 10:34:20 -04:00

suricata

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

systemd

…

tcpreplay

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

telegraf

FIX: remove the docker socket from so-telegraf

2026-09-24 14:30:25 -04:00

vars

Isolate the Hydra admin API on the soauth docker network

2026-09-17 16:58:49 -04:00

versionlock

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

vm

…

zeek

FIX: use /sbin/nologin for service accounts

2026-09-25 09:23:09 -04:00

allowed_states.map.jinja

remove outdated eval script and associated salt utility state

2026-07-01 11:12:39 -05:00

top.sls

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-07-02 10:27:54 -04:00