DefensiveDepth 89a1e2500e Exclude logstash startup errors

2024-08-28 16:50:11 -04:00

..

_beacons

change log levels

2020-04-01 16:54:48 -04:00

_modules

Update needs_restarting.py

2023-07-20 08:36:27 -04:00

backup

add identifiers for all cron.present

2023-04-13 16:25:47 -04:00

bpf

FIX: Annotations for BPF and Suricata PCAP #12626

2024-03-20 15:49:46 -04:00

ca

fix x509 mine_function

2024-06-18 12:33:33 -04:00

common

Exclude logstash startup errors

2024-08-28 16:50:11 -04:00

cron

use global vars in states

2022-10-11 11:57:15 -04:00

curator

only run the file.absent state if there are files to delete

2023-12-21 09:36:47 -05:00

desktop

add putty to sod packages.sls

2024-02-08 22:05:37 -05:00

docker

Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka

2024-06-12 12:36:58 -04:00

docker_clean

allow states for desktop. give all nodes docker_clean, order it last

2023-09-01 09:39:39 -04:00

elastalert

notification updates

2024-08-22 09:02:32 -04:00

elastic-fleet-package-registry

Allow additional docker parameters

2023-05-18 16:52:38 -04:00

elasticagent

Add tcp and udp integration

2023-08-30 13:04:32 +00:00

elasticfleet

Update pipeline version

2024-08-27 13:08:35 -04:00

elasticsearch

Merge pull request #13554 from Security-Onion-Solutions/fix/ilm_soc_logs

2024-08-26 12:54:03 -04:00

firewall

update kafka firewall annotations config

2024-08-06 14:40:53 -04:00

global

Use global.pipeline for redis / kafka states

2024-04-11 16:20:09 -04:00

healthcheck

change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679

2021-01-20 15:09:53 -05:00

host

Adjust host annotations

2023-03-20 16:20:22 -04:00

idh

pkg not file

2024-05-10 12:33:56 -04:00

idstools

Update rulecat.conf

2024-07-22 10:20:30 -04:00

influxdb

Show Kafka EPS for nodes with broker role only

2024-07-15 16:27:48 -04:00

kafka

searchnode logstash-kafka cert generation

2024-07-20 11:31:33 -04:00

kibana

Merge branch '2.4/dev' into foxtrot

2024-07-30 08:52:48 -04:00

kratos

lks/fps

2024-01-24 11:17:32 -05:00

logrotate

Remove Curator

2023-12-08 19:37:06 +00:00

logstash

Remove redis input pipeline from searchnodes when global pipeline is Kafka

2024-07-12 14:44:10 -04:00

manager

Add context

2024-08-26 16:15:56 -04:00

motd

FIX: Update MOTD #13317

2024-07-09 10:06:16 -04:00

nginx

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

ntp

Initial Oracle support

2023-07-13 10:54:04 -04:00

orch

add copyright

2024-05-08 10:14:08 -04:00

patch

add description for soc_patch.yaml

2023-12-06 15:51:00 -05:00

pcap

Merge pull request #12544 from Security-Onion-Solutions/jertel/status

2024-03-11 10:29:33 -04:00

pipeline

elastic pipeline enable

2021-06-01 12:12:20 -04:00

podman

docker ips changes

2023-07-21 16:06:52 -04:00

reactor

Move In Day

2022-09-07 09:06:25 -04:00

redis

Use global.pipeline for redis / kafka states

2024-04-11 16:20:09 -04:00

registry

Update registry version

2024-08-15 09:34:20 -04:00

repo/client

Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig

2024-01-15 21:30:31 -05:00

salt

unhold all verions for upgrade

2024-08-06 09:26:58 -04:00

sensor

remove space

2024-06-05 08:58:46 -04:00

sensoroni

removed unused property

2024-03-13 13:49:44 -04:00

setup

change post setup highstate cron to 5 minutes since accepting minion runs a highstate

2023-10-20 13:46:24 -04:00

soc

move custom alerters to subgroup; avoid false positives on log check

2024-08-28 09:32:25 -04:00

ssl

split Kafka ssl from ssl/init. Certs won't be generated until Kafka is enabled. Also runs some clean up for old Kafka certs

2024-07-10 11:32:43 -04:00

stig

update profile

2024-06-17 15:53:49 -04:00

strelka

Change Compilation Report Path

2024-05-17 15:47:23 -06:00

suricata

handle suricata network and port vars as string or list

2024-08-13 15:44:08 -04:00

systemd

add delay to salt-minion service starting - https://github.com/Security-Onion-Solutions/securityonion/issues/3543

2021-04-14 10:22:06 -04:00

tcpreplay

use global vars in states

2022-10-11 11:57:15 -04:00

telegraf

wrong location for global.pipeline check

2024-06-13 08:50:53 -04:00

utility

init.sls needs to import GLOBALS

2022-12-16 15:59:17 -05:00

vars

Make global.pipeline use GLOBALMERGED value

2024-04-12 11:21:19 -04:00

zeek

zeek networks will only ever have one HOME_NETWORKS setting

2024-05-01 09:31:11 -04:00

allowed_states.map.jinja

remove elasticsearch.ca from receiver allowed_states. Replaced by generated kafka trust

2024-07-10 13:24:02 -04:00

schedule.sls

rename highstate schedule

2023-04-24 09:31:32 -04:00

top.sls

searchnode logstash-kafka cert generation

2024-07-20 11:31:33 -04:00