Commit Graph

44 Commits

Author SHA1 Message Date
836515f6d1 update kibana objects 2019-05-07 17:19:31 +01:00
155c3ba163 create unified cvss field 2019-05-07 17:17:53 +01:00
44d75c397f rename qualys modules to be more accurate 2019-05-03 16:39:57 +01:00
fb76b0a1ce rename plugin to signature and cvss_x to cvss2_x 2019-05-03 16:25:29 +01:00
1597ad13e8 add utility to extract kibana objects 2019-05-02 11:42:41 +01:00
9c27f5d4a2 kibana object updates 2019-05-01 20:51:49 +01:00
98a84af5d0 use web_application_name as asset 2019-05-01 20:50:41 +01:00
5b6a51f02c add unique document id 2019-05-01 17:51:46 +01:00
abf6b9f048 Remove debug output from logstash 2019-04-24 09:25:02 +10:00
7999810d28 fix qualys logstash conditionals 2019-04-22 13:48:25 +10:00
0c3200567e remove unnecessary groks 2019-04-22 11:38:41 +10:00
8d59831855 don't use reserved _timestamp 2019-04-22 11:18:49 +10:00
08334973be bring inline with master 2019-04-17 19:10:21 +10:00
50f6c43a2f Remove ELK5 resources 2019-04-17 19:05:10 +10:00
9c7600b264 Updates for normalised fields and json output 2019-04-17 16:31:37 +10:00
e8d0c71bfb Merge branch 'docker-fixes' into feature-nessus-json-latest
* docker-fixes: (33 commits)
  fix test output
  set default path and fix restore
  Set limit to bail out on
  increase timeout for ES sync
  restore deleted files
  Test updates
  Move vulnwhisperer tests to a script
  standardise /tmp to /opt
  Update test
  Add docker test script
  Expose Logstash API port
  sudo chown
  fix
  Fix permissions for ES
  Fix build command
  Test travis docker
  update kibana objects to match template
  update index template
  Retry template installation a few times
  Add initial ELK6 index template
  ...

# Conflicts:
#	.travis.yml
#	configs/test.ini
#	docker-compose-test.yml
#	docker-compose.v6.yml
#	resources/elk5-old_compatibility/logstash/1000_nessus_process_file.conf
#	resources/elk6/init_kibana.sh
#	resources/elk6/pipeline/1000_nessus_process_file.conf
#	resources/elk6/pipeline/2000_qualys_web_scans.conf
#	resources/elk6/pipeline/3000_openvas.conf
2019-04-17 15:40:19 +10:00
e30dbe244b standardise /tmp to /opt 2019-04-17 14:52:03 +10:00
e17ff42adb update kibana objects to match template 2019-04-17 14:41:25 +10:00
f7d47ae753 update index template 2019-04-17 14:41:14 +10:00
d67122a099 Retry template installation a few times 2019-04-17 14:40:07 +10:00
3433231bb4 Add initial ELK6 index template 2019-04-16 11:30:27 +10:00
4d153ec7f2 Add index template to ES for docker 2019-04-16 09:57:20 +10:00
1d92f71f9c fix issue mentioned in #163, although not applied to ELK6 2019-04-15 17:06:09 +02:00
ca5500add4 cvss mapping moved to vulnwhisperer 2019-04-15 22:02:33 +10:00
ee327874e5 Move to a common normalisation function 2019-04-15 21:12:07 +10:00
dd66414fe7 remove _timestamp correctly 2019-04-15 20:12:28 +10:00
97d2a2606c Cleanup logstash configs 2019-04-15 20:10:49 +10:00
00f9b7659b Docker install ES index template 2019-04-15 18:17:43 +10:00
96e7211e77 Add mode back to logstash conf 2019-04-15 17:16:29 +10:00
603050e7b3 cherry pick #0227636 2019-04-12 18:04:19 +10:00
0227636c4c unify case among config 2019-04-12 17:54:17 +10:00
496fd23121 Remove nessus csv completely 2019-04-11 22:22:58 +10:00
0710b38de3 Update nessus logstash configs 2019-04-11 20:27:54 +10:00
7240fd9028 Add qualys paths to elk5 logstash config 2019-04-11 10:43:05 +10:00
db0d7a0491 Fix nessus logstash field cvss3_vector 2019-04-11 10:43:05 +10:00
3bd76e0217 Clean config and separate qualys data 2019-04-11 10:43:05 +10:00
8dc3b2f8ac Add qualys paths to elk5 logstash config 2019-04-11 10:41:13 +10:00
d2a7513ed1 Fix nessus logstash field cvss3_vector 2019-04-11 10:36:41 +10:00
4ed6827ee6 Clean config and separate qualys data 2019-04-11 08:27:28 +10:00
71352aee57 Add external API mocking and travis tests (#164)
* Fix closing logging handlers

* Fix *some* unicode issues for nessus and qualys

* Prevent multiple requests to nessus scans endpoint

* More unicode fixes

* Remove unnecessary call

* Fix whitespace

* Add mock module and argument

* Add test config and data

* Fix whitespace again

* Disable qualys_web until data is available

* Use logging module

* Delete report_tracker.db

* Cleanup mock calls

* Add httpretty to requirements

* Refactor into a class

* Updates travis tests

* Fix exit codes

* Remove print statements

* Remove test

* Add test directory as submodule
2019-04-05 10:57:39 +02:00
401dfec2c8 fix #143, added a temporary container to upload through kibana API 2019-03-04 15:10:51 +01:00
05420ddfd0 readding docker-compose credentials template 2019-02-25 12:32:32 +01:00
bdbe31d425 resources reorg 2 2019-02-25 12:29:00 +01:00
f170dcb05f reorg resources files 2019-02-25 12:27:30 +01:00