reyesj2 eca2a4a9c8 Logstash consumer threads should match topic partition count ...

- Default is set to 3. If there are too many consumer threads it may lead to idle logstash worker threads and could require decreasing this value to saturate workers

Signed-off-by: reyesj2 <94730068+reyesj2@users.noreply.github.com>

2024-05-08 16:17:09 -04:00

..

_beacons

…

_modules

Update needs_restarting.py

2023-07-20 08:36:27 -04:00

backup

…

bpf

FIX: Annotations for BPF and Suricata PCAP #12626

2024-03-20 15:49:46 -04:00

ca

Add kafka signing_policy for client/server auth. Add kafka-client cert on manager so manager can interact with kafka using its own cert

2024-04-04 16:21:29 -04:00

common

Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka

2024-05-02 15:12:27 -04:00

cron

…

curator

only run the file.absent state if there are files to delete

2023-12-21 09:36:47 -05:00

desktop

add putty to sod packages.sls

2024-02-08 22:05:37 -05:00

docker

Add basic read-only metric collection from Kafka

2024-05-08 16:13:09 -04:00

docker_clean

allow states for desktop. give all nodes docker_clean, order it last

2023-09-01 09:39:39 -04:00

elastalert

Sigma pivot fix and cleanup

2024-04-29 08:49:05 -04:00

elastic-fleet-package-registry

…

elasticagent

Add tcp and udp integration

2023-08-30 13:04:32 +00:00

elasticfleet

Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka

2024-05-02 15:12:27 -04:00

elasticsearch

Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka

2024-05-02 15:12:27 -04:00

firewall

Merge remote-tracking branch 'remotes/origin/2.4/dev' into reyesj2/kafka

2024-05-02 15:12:27 -04:00

global

Use global.pipeline for redis / kafka states

2024-04-11 16:20:09 -04:00

healthcheck

…

host

…

idh

add description for http_x_skin

2023-12-06 15:44:36 -05:00

idstools

make rule settings advanced

2024-05-01 12:51:04 -04:00

influxdb

Specify config.yaml in config_path. Otherwise when no influxd.bolt exists influxdb will fail to read the config file and won't create a new db.

2023-10-26 13:15:40 -04:00

kafka

Add basic read-only metric collection from Kafka

2024-05-08 16:13:09 -04:00

kibana

Check Kibana API not Web

2024-01-11 12:30:23 -05:00

kratos

lks/fps

2024-01-24 11:17:32 -05:00

logrotate

Remove Curator

2023-12-08 19:37:06 +00:00

logstash

Logstash consumer threads should match topic partition count

2024-05-08 16:17:09 -04:00

manager

Write out Kafka pillar path

2024-05-01 10:45:46 -04:00

motd

Update so_motd.jinja

2023-06-15 09:54:23 -04:00

nginx

Initial cut to remove Playbook and deps

2024-03-25 19:42:31 -04:00

ntp

Initial Oracle support

2023-07-13 10:54:04 -04:00

patch

add description for soc_patch.yaml

2023-12-06 15:51:00 -05:00

pcap

Merge pull request #12544 from Security-Onion-Solutions/jertel/status

2024-03-11 10:29:33 -04:00

pipeline

…

podman

docker ips changes

2023-07-21 16:06:52 -04:00

reactor

Setup kafka reactor for managing kafka controllers globally

2024-04-22 16:42:59 -04:00

redis

Use global.pipeline for redis / kafka states

2024-04-11 16:20:09 -04:00

registry

upgrade registry version

2023-07-19 09:51:07 -04:00

repo/client

Modify yum.conf.jinja to include localpkg_gpgcheck rather than modifying it with so-stig

2024-01-15 21:30:31 -05:00

salt

Remove salt reactor for Kafka

2024-04-29 11:35:46 -04:00

sensor

Update verbiage and links in soc_sensor.yaml

2023-08-01 12:45:09 -04:00

sensoroni

removed unused property

2024-03-13 13:49:44 -04:00

setup

change post setup highstate cron to 5 minutes since accepting minion runs a highstate

2023-10-20 13:46:24 -04:00

soc

FIX: Improve File dashboard #12914

2024-05-02 10:42:34 -04:00

ssl

Generate different Kafka certs for different SO nodetypes

2024-05-01 13:02:47 -04:00

stig

Run stig post remediate scan against default ol9 scap-security-guide.

2024-03-06 17:19:01 -05:00

strelka

Add runtime status logs

2024-04-24 16:33:47 -04:00

suricata

make rule settings advanced

2024-05-01 12:51:04 -04:00

systemd

…

tcpreplay

…

telegraf

Add basic read-only metric collection from Kafka

2024-05-08 16:13:09 -04:00

utility

…

vars

Make global.pipeline use GLOBALMERGED value

2024-04-12 11:21:19 -04:00

zeek

zeek networks will only ever have one HOME_NETWORKS setting

2024-05-01 09:31:11 -04:00

allowed_states.map.jinja

need /opt/so/conf/ca/cacerts on receiver for kafka to run

2024-04-12 13:50:25 -04:00

schedule.sls

…

top.sls

Add kafka state to standalone highstate

2024-05-01 13:03:14 -04:00