Corey Ogburn 20f915f649 so-detection refresh_interval => 1s ...

Speeds up the refresh_interval so bulk indexing a single rule does not wait 30s.

2024-07-25 12:53:04 -06:00

..

files

remove dash(-) from kafka.id

2024-06-11 11:55:17 -04:00

roles

Update limited-analyst.json

2024-04-17 13:14:45 -04:00

templates

Revert "Change pipeline version for agent"

2024-07-15 11:33:52 -04:00

tools

Revert "Elastic 8.14.2"

2024-07-15 11:28:59 -04:00

auth.sls

Move In Day

2022-09-07 09:06:25 -04:00

base-template.json.jinja

Initial template refactor

2022-02-14 15:20:33 +00:00

ca.sls

need /opt/so/conf/ca/cacerts on receiver for kafka to run

2024-04-12 13:50:25 -04:00

config.map.jinja

fix custom indices

2024-07-16 12:39:30 -04:00

config.sls

Custom pipelines in UI

2024-01-31 20:16:48 +00:00

defaults.yaml

so-detection refresh_interval => 1s

2024-07-25 12:53:04 -06:00

disabled.sls

Remove Curator

2023-12-08 19:37:06 +00:00

download.sls

predownload logstash and elastic for new searchnode and heavynode

2024-05-07 10:13:51 -04:00

enabled.sls

create and use redis:nodes and elasticsearch:nodes pillars

2024-06-20 16:42:11 -04:00

init.sls

enabled/disable elasticsearch in ui

2023-05-09 09:33:37 -04:00

soc_elasticsearch.yaml

Revert "Elastic 8.14.2"

2024-07-15 11:28:59 -04:00

sostatus.sls

enabled/disable elasticsearch in ui

2023-05-09 09:33:37 -04:00

template.map.jinja

only include global phases if defined in default for that index

2024-07-17 10:16:11 -04:00