Josh Patterson d87deb6671 Run zeekctl cron when cron-only zeekctl settings change ...

LogExpireInterval, StatsLogExpireInterval, CrashExpireInterval, MinDiskSpace
and MailHostUpDown are only acted on by ZeekControl's 'cron' command, which
nothing ever ran, so setting them in SOC had no effect.

Track those five in /opt/so/state/zeek/zeekctl_cron_settings and trigger the
cron run off that file, so unrelated edits like CompressLogs don't fire it.
Runs as the zeek user to avoid root-owned files under /nsm/zeek, with
--no-watch so the crashed-node watchdog doesn't race the container restart.

2026-08-12 17:10:30 -04:00

..

_beacons

Add unit tests for _beacons and wire into CI

2026-07-16 15:28:22 -04:00

_modules

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00

_runners

merge 2.4/dev

2025-12-02 11:16:08 -06:00

backup

use so-config-backup script in soup

2026-06-01 11:52:35 -05:00

bpf

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

ca

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00

common

more exclusions due to preproc refactor

2026-08-11 22:02:38 -04:00

cron

…

desktop

the great ssl refactor

2025-12-11 17:30:06 -05:00

docker

Change so-postgres final_octet to 47

2026-04-21 09:33:47 -04:00

docker_clean

prune images if so-docker-prune exists

2026-05-08 10:13:15 -04:00

elastalert

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

elastic-fleet-package-registry

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-05-06 08:16:41 -04:00

elasticagent

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

elasticfleet

Revert "elastic fleet server persistence"

2026-07-24 13:18:48 -05:00

elasticsearch

Merge pull request #16109 from Security-Onion-Solutions/fixESHEAP

2026-07-24 09:04:58 -04:00

firewall

Open postgres on every hostgroup that opens influxdb

2026-04-29 09:09:50 -04:00

global

Move global.push config to salt.auto_apply

2026-06-24 15:17:48 -04:00

healthcheck

…

host

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

hydra

ensure restart_policy is below image

2026-07-15 11:04:51 -04:00

hypervisor

merge 2.4/dev

2025-12-02 11:16:08 -06:00

idh

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

influxdb

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

kafka

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-06-23 10:32:32 -04:00

kibana

remove thehive scripted field from kibana saved objects

2026-08-06 14:03:27 -05:00

kratos

move up restart policy for so-kratos

2026-07-14 13:34:19 -04:00

libvirt

remove comments

2026-07-15 16:28:35 -04:00

logrotate

Rename so-grid-highstate to so-soup-grid-highstate

2026-08-11 10:12:40 -04:00

logstash

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-06-23 10:32:32 -04:00

manager

Merge pull request #16153 from Security-Onion-Solutions/asasoup

2026-08-12 10:27:35 -04:00

motd

FIX: Update MOTD #13317

2024-07-09 10:06:16 -04:00

nginx

nginx configuration improvements

2026-08-03 15:19:18 -04:00

ntp

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

orch

Move global.push config to salt.auto_apply

2026-06-24 15:17:48 -04:00

patch

ensure bool sliders for patch

2026-03-19 14:39:10 -04:00

pcap

cleanup steno. sensor run pcap.cleanup

2026-03-10 16:09:32 -04:00

pipeline

…

postgres

Empty a default and create its partition in one transaction

2026-08-10 15:55:07 -04:00

reactor

update vm state applid for pillar_push_map

2026-07-27 10:14:10 -04:00

redis

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

registry

ensure restart_policy is below image

2026-07-15 11:04:51 -04:00

repo/client

add sslverify=0 to minion repo config. Updates are pulled from the manager hosted repo

2026-07-24 16:59:42 -05:00

salt

Lower default auto_apply batch size to 10%

2026-08-12 10:14:30 -04:00

sensor

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

sensoroni

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

setup/virt

remove highstate from startup_states. highstate on system start

2026-05-14 13:57:40 -04:00

soc

Use newer /api/joblookup endpoint

2026-08-10 13:38:41 -04:00

ssl

dont remove ca in ssl.remove

2026-01-07 14:14:57 -05:00

stig

update stig profile v1r3

2026-03-23 14:04:48 -05:00

storage

remove .log extension

2025-10-14 11:03:00 -04:00

strelka

change restart_policy to unless-stopped

2026-07-15 10:49:27 -04:00

suricata

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-07-16 15:29:51 -04:00

systemd

…

tcpreplay

reduce highstate frequency with active push for rules and pillars

2026-04-10 15:43:16 -04:00

telegraf

Fix Telegraf metrics falling into pg_partman default partitions

2026-08-05 17:39:39 -04:00

vars

Add default esheap value so nodes highstate without the pillar value

2026-07-23 15:16:26 -04:00

versionlock

update helpLink references for new documentation

2026-03-18 09:46:45 -04:00

vm

handle - in hypervisor hostname

2025-08-04 15:25:26 -04:00

zeek

Run zeekctl cron when cron-only zeekctl settings change

2026-08-12 17:10:30 -04:00

allowed_states.map.jinja

remove outdated eval script and associated salt utility state

2026-07-01 11:12:39 -05:00

top.sls

Merge remote-tracking branch 'origin/3/dev' into saltthangs

2026-07-02 10:27:54 -04:00