Skip to content
This repository was archived by the owner on Apr 4, 2025. It is now read-only.

Commit cce5804

Browse files
authored
Others bugs (#18)
1 parent 1605c49 commit cce5804

File tree

3 files changed

+18
-48
lines changed

3 files changed

+18
-48
lines changed

Correlation Rules/README.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -50,15 +50,15 @@ How often in seconds the alert should be checked.
5050

5151
This field declares that the iterations will occur on the cache of the correlation engine and contains the definition of said iterations. When this field is used, the search field is not used and vice versa.
5252

53-
**cache -> allOff**
53+
**cache -> allOf**
5454

5555
All comparisons within this field must be met for the rule to generate an alert.
5656

57-
**cache -> oneOff**
57+
**cache -> oneOf**
5858

5959
Any comparison within this field must be met for the rule to generate an alert.
6060

61-
**cache -> \[allOff | oneOff\] -> field**
61+
**cache -> \[allOf | oneOf\] -> field**
6262

6363
The field on which the comparison will be applied.
6464

@@ -99,13 +99,13 @@ This description also applies to \[cache | search\] -> save -> field
9999
"friends.#(nets.#(=="fb"))#.first" >> ["Dale","Roger"]
100100
```
101101

102-
**cache -> \[allOff | oneOff\] -> operator**
102+
**cache -> \[allOf | oneOf\] -> operator**
103103

104104
Operator to use in the comparison. See information about the operators in [Operators](https://github.com/AtlasInsideCorp/UTMStackCorrelationRules/blob/master/README.md#:~:text=simple%20quotation%20marks.-,Operators,-%3D%3D)
105105

106-
**cache -> \[allOff | oneOff\] -> value**
106+
**cache -> \[allOf | oneOf\] -> value**
107107

108-
Value to compare the content of "cache -> \[allOff | oneOff\] -> field". In the second iteration case or onwards, you can use an alias to use the content of that alias as a value.
108+
Value to compare the content of "cache -> \[allOf | oneOf\] -> field". In the second iteration case or onwards, you can use an alias to use the content of that alias as a value.
109109

110110
**cache -> timeLapse**
111111

Installation/SSLConfiguration.md

Lines changed: 12 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -45,28 +45,17 @@ systemctl restart docker
4545
Once these steps are completed, your SSL certificate will be installed and configured for UTMStack. For any issues or questions during the installation, please contact our support team.
4646

4747
## Generate SSL with Certbot in UTMStack without DNS Change
48-
1. Allow Necessary Ports
49-
Open ports for Certbot and Nginx:
5048

51-
```
52-
ufw allow 80/tcp
53-
ufw allow 443/tcp
54-
ufw allow 1194/tcp
55-
ufw reload
56-
```
57-
58-
2. Install Certbot
49+
1. Install Certbot
5950
Install the necessary tools and dependencies:
6051
```
6152
sudo apt install certbot python3-certbot-nginx
6253
```
6354

64-
3. Manage Services
65-
Stop Nginx and frontend services:
55+
2. Manage Services pause utmstack_frontend services:
6656

6757
```
68-
systemctl stop nginx
69-
docker stop frontend
58+
docker service scale utmstack_frontend=0
7059
docker ps | grep frontend
7160
```
7261
Then, start Nginx:
@@ -84,29 +73,22 @@ sudo certbot --nginx -d siem.domain.com
8473
5. Update SSL Certificate in UTMStack
8574

8675
```
87-
systemctl stop nginx
88-
systemctl disable nginx
8976
cp /etc/letsencrypt/live/*/fullchain.pem /UTMStack/cert/utm.crt
9077
cp /etc/letsencrypt/live/*/privkey.pem /UTMStack/cert/utm.key
91-
systemctl stop docker
92-
systemctl start docker
78+
docker service scale utmstack_frontend=1
79+
docker ps | grep frontend
80+
systemctl restart docker
9381
```
9482

9583
## Renew the Certificate Generated by Certbot in UTMStack
9684

97-
1. Manage Frontend Service
85+
1. Manage Services pause utmstack_frontend services:
9886

9987
```
100-
docker stop frontend
101-
```
102-
103-
2. Start Nginx
104-
105-
```
106-
systemctl start nginx
88+
docker service scale utmstack_frontend=0
10789
```
10890

109-
3. Renew SSL Certificate
91+
2. Renew SSL Certificate
11092

11193
```
11294
certbot renew
@@ -117,11 +99,10 @@ certbot renew
11799
Replace "siem.domain.com" with your specific domain:
118100

119101
```
120-
systemctl stop nginx
121-
systemctl disable nginx
122102
cp /etc/letsencrypt/live/siem.domain.com/fullchain.pem /UTMStack/cert/utm.crt
123103
cp /etc/letsencrypt/live/siem.domain.com/privkey.pem /UTMStack/cert/utm.key
124-
systemctl stop docker
125-
systemctl start docker
104+
docker service scale utmstack_frontend=1
105+
docker ps | grep frontend
106+
systemctl restart docker
126107
```
127108

UTMStackComponents/Configuration/ApplicationSetting.md

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -9,17 +9,6 @@ nav_order: 4
99

1010
UTMStack offers a comprehensive configuration module where administrators can adjust various settings to customize the application according to their organizational preferences. Here's a detailed breakdown:
1111

12-
## SMS Notifications using Twilio
13-
14-
UTMStack has integrated with Twilio, a renowned cloud communications platform, to facilitate SMS notifications. To ensure timely and accurate SMS delivery, it's crucial to configure the following parameters:
15-
16-
- **Twilio Authentication Token**: This secret token is used to authenticate your Twilio account. Ensure you enter the correct token to maintain seamless communication.
17-
18-
- **Twilio Account SID**: Your unique Twilio Account identifier. It's crucial for distinguishing and authorizing your Twilio account.
19-
20-
- **Twilio Virtual Phone Number**: This is the dedicated phone number from which SMS notifications will be sent. It must be procured from your Twilio dashboard.
21-
22-
2312
## Email Notifications
2413

2514
Configure the email settings to send emails notifications for the alerts and incidents:

0 commit comments

Comments
 (0)