Monday, December 11, 2017

securityonion-sostat - 20120722-0ubuntu0securityonion82 now available for Security Onion!

The following package is now available:
securityonion-sostat - 20120722-0ubuntu0securityonion82

This package should resolve the following issues:

Issue 1156: soup: delete old Docker images
https://github.com/Security-Onion-Solutions/security-onion/issues/1156

Issue 1157: sostat: provide statistics on logstash queue
https://github.com/Security-Onion-Solutions/security-onion/issues/1157

Thanks
Thanks to Wes Lambert for testing this package!

Updating
Please see the following page for full update instructions:
https://securityonion.net/wiki/Upgrade

Want to show your support for Security Onion?
Security Onion t-shirts are available in our CafePress store!
http://www.cafepress.com/securityonion/11820053

Training
Security Onion Solutions offers onsite and online training!  For more information, please see:
https://securityonionsolutions.com

Support
Need support?  Please see:
https://securityonion.net/wiki/Support

Thanks!

Tuesday, December 5, 2017

6 month EOL notice for Security Onion Xplico package

Our Xplico package will reach EOL (End Of Life) on June 5, 2018. After that date, we will no longer provide updates or support of any kind for Xplico.

Since 2015, our Setup wizard has disabled Xplico by default when choosing the "Best Practices" option:
https://github.com/Security-Onion-Solutions/securityonion-setup/blob/dd9c8e098af3e6bc253570b75b789ff928c10323/debian/patches/streamline-Setup-with-new-defaults-and-add-new-Custom-option

Most users are not using Xplico at all.  Most of its functionality can be found in other tools.

We recently released our 14.04.5.5 ISO image and it no longer includes Xplico:
http://blog.securityonion.net/2017/11/elastic-stack-beta-2-release-and.html

Additionally, we recently made some changes to make it easier to totally remove the Xplico package from your existing system:
http://blog.securityonion.net/2017/11/securityonion-nsmnow-admin-scripts.html
http://blog.securityonion.net/2017/11/securityonion-iso-20151016.html
http://blog.securityonion.net/2017/11/securityonion-setup-20120912.html

To remove Xplico from your system, please follow the steps here:
https://securityonion.net/wiki/Xplico#removing

Monday, December 4, 2017