Skip to content

Commit

Permalink
Merge branch 'release-1.3.0' into mreeve-69-git_based_deployment_vers…
Browse files Browse the repository at this point in the history
…ioning
  • Loading branch information
mreeve-snl authored Dec 18, 2023
2 parents f569946 + cdf08f4 commit 9beac38
Show file tree
Hide file tree
Showing 6 changed files with 104 additions and 105 deletions.
27 changes: 10 additions & 17 deletions Chapter 3 Files/deploy.sh
Original file line number Diff line number Diff line change
Expand Up @@ -149,11 +149,7 @@ function setroles() {
}

function setpasswords() {
temp="temp"
#override temp password if overwriting an old docker container
if [ -v OLD_ELASTIC_PASS ]; then
temp=$OLD_ELASTIC_PASS
fi
temp="temp"

echo -e "\e[32m[X]\e[0m Waiting for Elasticsearch to be ready"
max_attempts=25
Expand All @@ -167,7 +163,7 @@ function setpasswords() {
exit 1
fi
done
echo "Elasticsearch is up and running."
echo -e "\n\e[32m[X]\e[0m Elasticsearch is up and running."

echo -e "\e[32m[X]\e[0m Setting elastic user password"
curl --cacert certs/root-ca.crt --user elastic:${temp} -X POST "https://127.0.0.1:9200/_security/user/elastic/_password" -H 'Content-Type: application/json' -d' { "password" : "'"$elastic_user_pass"'"} '
Expand Down Expand Up @@ -784,17 +780,7 @@ function install() {
echo -e "\e[32m[X]\e[0m Configuring winlogbeat config and certificates to use $logstaship as the IP and $logstashcn as the DNS"

read -e -p "This script will use self signed certificates for communication and encryption. Do you want to continue with self signed certificates? ([y]es/[n]o): " -i "y" selfsignedyn
read -e -p "Skip Docker Install? ([y]es/[n]o): " -i "n" skipdinstall
read -e -p "Do you have an old elastic user password from a previous LME install? ([y]es/[n]o): " -i "n" old_elastic_user_pass

if [ "$old_elastic_user_pass" == "y" ]; then
res= false
while [ ! $res ]; do
read -e -p "PASSWORD: " OLD_ELASTIC_PASS
prompt "confirm password \"$OLD_ELASTIC_PASS\""
res=$?
done
fi
read -e -p "Skip Docker Install? ([y]es/[n]o): " -i "n" skipdinstall

if [ "$selfsignedyn" == "y" ]; then
#make certs
Expand Down Expand Up @@ -891,6 +877,13 @@ function install() {
#fix readability:
fixreadability

displaycredentials

echo -e "If you prefer to set your own elastic user password, then refer to our troubleshooting documentation:"
echo -e "https://github.com/cisagov/LME/blob/main/docs/markdown/reference/troubleshooting.md#changing-elastic-username-password\n\n"
}

function displaycredentials() {
echo ""
echo "##################################################################################"
echo "## Kibana/Elasticsearch Credentials are (these will not be accessible again!)"
Expand Down
59 changes: 27 additions & 32 deletions Chapter 4 Files/dashboards/security_dashboard_security_log.ndjson

Large diffs are not rendered by default.

23 changes: 11 additions & 12 deletions Chapter 4 Files/dashboards/sysmon_summary.ndjson

Large diffs are not rendered by default.

Loading

0 comments on commit 9beac38

Please sign in to comment.