Skip to content
This repository has been archived by the owner on Apr 16, 2021. It is now read-only.

securityonion-elastic: update elasticsearch ingest parser for bro_ssh #1592

Closed
dougburks opened this issue Aug 1, 2019 · 3 comments
Closed

securityonion-elastic: update elasticsearch ingest parser for bro_ssh #1592

dougburks opened this issue Aug 1, 2019 · 3 comments
Assignees
@dougburks
Projects
16.04.6.2

Comments

@dougburks
Copy link
Contributor

Need to map the following fields:
hassh
uid
@dougburks dougburks self-assigned this Aug 1, 2019
@dougburks dougburks added this to To do in 16.04.6.2 via automation Aug 1, 2019
dougburks added a commit to Security-Onion-Solutions/securityonion-elastic that referenced this issue Aug 1, 2019
@dougburks
securityonion-elastic: update elasticsearch ingest parser for bro_ssh S…
b18f037 
…ecurity-Onion-Solutions/security-onion#1592
@dougburks dougburks moved this from To do to In Testing in 16.04.6.2 Aug 1, 2019
@dougburks
Copy link
Contributor Author

Submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/pay0yg_0l08/discussion

@weslambert
Copy link
Collaborator

Looks good. 👍

@weslambert weslambert moved this from In Testing to Tested in 16.04.6.2 Aug 15, 2019
@dougburks
Copy link
Contributor Author

Published:
https://blog.securityonion.net/2019/08/elastic-682-wazuh-395-and-updated.html

16.04.6.2 automation moved this from Tested to Done Aug 27, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@dougburks dougburks

Labels
None yet
Projects
No open projects
16.04.6.2
  
Done
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dougburks @weslambert