Monday, November 12, 2018

Elastic 6.4.2 and updated securityonion-elastic package now available for Security Onion 16.04!

UPDATE 2018/11/14: Some folks are experiencing an issue with this update.  If you haven't already installed it, you may want to wait for the next release which is in testing now.  For more information, please see:
https://github.com/Security-Onion-Solutions/security-onion/issues/1369

UPDATE 2018/11/19: We've released an update which should the resolve the issue described below:
https://blog.securityonion.net/2018/11/elastic-643-and-updated-securityonion.html

The following are now available for Security Onion 16.04:
securityonion-elastic - 20180130-1ubuntu1securityonion141
Docker images for Elastic 6.4.2

Elastic 6.4.2

This should resolve the following issues:

Issue 1356: Elastic 6.4.2
https://github.com/Security-Onion-Solutions/security-onion/issues/1356

Issue 1340: securityonion-elastic: curator won't delete closed indices
https://github.com/Security-Onion-Solutions/security-onion/issues/1340

Issue 1350: securityonion-elastic: so-elastic-reset should run so-bro-restart
https://github.com/Security-Onion-Solutions/security-onion/issues/1350

Issue 1343: securityonion-elastic: avoid overwriting logstash.yml
https://github.com/Security-Onion-Solutions/security-onion/issues/1343

Issue 1359: securityonion-elastic: avoid duplicating logs into multiple indices
https://github.com/Security-Onion-Solutions/security-onion/issues/1359

Thanks
Thanks to the Elastic team for Elastic 6.4.2!
Thanks to Wes Lambert for his work on these updates!
Thanks to David Szili for testing these updates!

Updating
Please see the following page for full update instructions:
https://securityonion.net/wiki/Upgrade

Training
We have a 4-day Security Onion training class coming up in San Antonio, Texas!  If you can't make it to this onsite class, we have a new online training platform!  For more information and other training options, please see:
https://securityonionsolutions.com

Appliances
We now offer hardware appliances!  For more information, please see:
https://blog.securityonion.net/2018/10/introducing-security-onion-solutions.html

Support
Need support?  Please see:
https://securityonion.net/wiki/Support

Thanks!

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.