Discussions

• 1 You must be logged in to vote

  🙏

  Suricata dataset configuration

  JW7173 asked Mar 6, 2025 in Unsupported Versions · Unanswered

  

  

  

  

  6
• 1 You must be logged in to vote

  🙏

  Any future plans for an ansible playbook? Does someone has a playbook to share?

  stemanit asked Feb 24, 2025 in Unsupported Versions · Unanswered

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  An existing connection was forcibly closed by the remote host. (No alert is being generated for the agents)

  hanifmoha asked Feb 17, 2025 in 2.4 · Unanswered

  

  

  

  

  9
• 🧅

  Security Onion 2.4.141 now available including several fixes!

  dougburks announced Mar 31, 2025 in Announcements

  

  

  0
• 1 You must be logged in to vote

  #️⃣

  No alerts from agents - Fresh SO v2.4.140 install - No traffic on bond0 (realtek rtl8125)

  ll3N1GmAll asked Mar 27, 2025 in 2.4 · Unanswered

  

  

  4
• 1 You must be logged in to vote

  🙏

  elastalert - email-notifications - debugging?

  ejgh-oe asked Mar 26, 2025 in Unsupported Versions · Answered

  

  

  3
• 1 You must be logged in to vote

  🙏

  Install SO on Dell Insperion 3650 desktop

  ShayneDawg asked Mar 26, 2025 in Unsupported Versions · Unanswered

  

  

  

  

  2
• 1 You must be logged in to vote

  🙏

  Running SC 2.4 standalone on an i9-12900H

  unacomn asked Mar 27, 2025 in Unsupported Versions · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Different maxmemory for different receiver/manager nodes

  brazorfajeje asked Mar 4, 2025 in Unsupported Versions · Unanswered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  Add new Zeek Integrations manually/automajgically

  Ncgodwod asked Mar 3, 2025 in 2.4 · Unanswered

  

  

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  how to recover from backup config files

  011248163264 asked Mar 25, 2025 in 2.4 · Answered

  

  

  2
• 🧅

  Security Onion Documentation printed book now updated for Security Onion 2.4.140!

  dougburks announced Mar 28, 2025 in Announcements

  

  

  0
• 1 You must be logged in to vote

  🙏

  Request: Need the Ability to Get to Kibana's Security Detections Endpoints within DevTools and via API Calls

  agafonoo asked Mar 18, 2025 in Unsupported Versions · Answered

  

  

  1
• 🙏

  Ja4+ and Zeek Parsing

  ColeVan asked Oct 30, 2024 in Unsupported Versions · Unanswered

  

  

  2
• 1 You must be logged in to vote

  🙏

  zeek change opcua port

  gustavoberman asked Mar 28, 2025 in Unsupported Versions · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Security Page In Kibana Displays "Page not found"

  zchilders13 asked Mar 26, 2025 in Unsupported Versions · Answered

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  Problem Sensor

  blacklistlista asked Mar 26, 2025 in 2.4 · Unanswered

  

  

  1
• 1 You must be logged in to vote

  #️⃣

  Fresh Install 2.4.140 - Turning Off Manager as a Receiver

  skorpal asked Mar 26, 2025 in 2.4 · Unanswered

  

  

  1
• 1 You must be logged in to vote

  🙏

  Suricata: Rules Mismatch

  Zer0-cyber-web asked Mar 24, 2025 in Unsupported Versions · Answered

  

  

  2
• 1 You must be logged in to vote

  #️⃣

  Importing PCAP does not work as expected

  gustavoberman asked Mar 14, 2025 in 2.4 · Answered

  

  

  11
• 2 You must be logged in to vote

  #️⃣

  2.4.130 Upgrade - No longer can retrieve PCAPs on Standalone

  ZacharyPax asked Mar 12, 2025 in 2.4 · Answered

  

  

  

  

  15
• 1 You must be logged in to vote

  🙏

  Security Onion: 404 Errors in Alerts & Detections Tabs + Rule Mismatch in ElastAlert & Suricata

  NassosRossi asked Mar 18, 2025 in Unsupported Versions · Unanswered

  

  

  

  

  9
• 🧅

  Security Onion 2.4.140 now available including Suricata 7.0.9, Zeek 7.0.6, and much more!

  dougburks announced Mar 24, 2025 in Announcements

  

  

  0
• 1 You must be logged in to vote

  🙏

  SO Elastic Integration w/ OpenCTI for enrichment.

  Slipperyclock asked Feb 19, 2025 in Unsupported Versions · Unanswered

  

  

  

  

  5
• 2 You must be logged in to vote

  #️⃣

  Changing the Bind Port 6791 Used by the Agent for HTTP While Maintaining Fleet Server Management

  stormdosertao asked Mar 18, 2025 in 2.4 · Unanswered

  

  

  

  

  3