2.4.100-20240829

Download the ISO

https://github.com/Security-Onion-Solutions/securityonion/blob/b7e047d14938837a068ceb2b807117506d9125cb/DOWNLOAD_AND_VERIFY_ISO.md

What's Changed

• Elastic 8.14.3 by @weslambert in #13347
• Update VERSION by @TOoSmOotH in #13401
• Turn off console messages by @TOoSmOotH in #13381
• Update so-rule-update by @TOoSmOotH in #13373
• Elastic 8.14.3 by @weslambert in #13402
• Provide new setting to require OTP by @jertel in #13406
• Add removed changes by @weslambert in #13407
• Fix fleet setup by @weslambert in #13408
• Fix defender winlog name change by @weslambert in #13409
• Change agent pipeline version by @weslambert in #13410
• Fix system mapping by @weslambert in #13414
• Change name for system component by @weslambert in #13418
• Salt3006.9 by @m0duspwnens in #13425
• retry up to 5 times if reposync fails by @jertel in #13429
• retry up to 5 times if reposync fails by @jertel in #13430
• Issue/13438 by @m0duspwnens in #13441
• correct firewall annotation for kafka by @reyesj2 in #13443
• Cogburn/ai summaries by @coreyogburn in #13453
• fix repo path by @jertel in #13457
• FEATURE: Add warning to soup about ssh #13466 by @dougburks in #13467
• fix issue with reset pw and mfa by @jertel in #13470
• Update SECURITY.md by @dougburks in #13473
• handle suricata network and port vars as string or list by @m0duspwnens in #13478
• Update so-elasticsearch-cluster-space-used for changes in _cat/alloca… by @dougburks in #13481
• Update column number because of changes to API by @weslambert in #13482
• Update registry version by @TOoSmOotH in #13483
• Add influxdb known error by @defensivedepth in #13487
• Ignore older SOC logs before licenseStatus field by @weslambert in #13511
• Add Tenable IO by @weslambert in #13526
• Check for endpoint package by @weslambert in #13531
• Add support for new appliance raid controllers by @TOoSmOotH in #13530
• Create detections.alerts ILM policy with corresponding name by @weslambert in #13528
• notification updates by @jertel in #13535
• FIX: Check Elasticsearch for endpoint component template before loading templates by @weslambert in #13537
• exclude all logstash errors related to license manager init log line by @jertel in #13540
• set kafka.id in common ingest pipeline by @reyesj2 in #13546
• Elastic Fleet refactoring by @defensivedepth in #13547
• Use global@custom from common pipeline by @weslambert in #13548
• FIX: Add so-soc-logs by @weslambert in #13554
• Fix policy load by @defensivedepth in #13556
• annotation updates by @jertel in #13561
• Update pipeline version for EVTX by @weslambert in #13562
• move custom alerters to subgroup; avoid false positives on log check by @jertel in #13565
• Exclude logstash startup errors by @defensivedepth in #13570

Full Changelog: 2.4.90-20240729...2.4.100-20240829