Elastic Stack 6.2.4

[dougburks]

• Elasticsearch

  • Elasticsearch 6.2.4 - Release Notes

• Logstash

  • Logstash 6.2.4 - Release Notes

• Kibana

  • Kibana 6.2.4 - Release Notes

• so-allow-elastic

  • allow CIDR notation - commit

• so-elastic-common

  • if ! grep DOCKERHUB /etc/nsm/elasticdownload.conf - commit

• so-elastic-configure-stack

  • only update Elasticsearch heap size if we just copied jvm.options - commit
  • only update Logstash heap size if we just copied jvm.options - commit
  • make sure that shard count is preserved in Logstash's Elasticsearch template - commit

• sosetup-elastic

  • "If you need to adjust this later, you can modify LOG_SIZE_LIMIT in /etc/nsm/securityonion.conf" - commit1 commit2

[dougburks]

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/BXv1e5T-Ly4/discussion

[dougburks]

published:
https://blog.securityonion.net/2018/04/elastic-624-and-securityonion-elastic.html