Adds DoED back into Notes & Syntax updates

Patching Notes--CaaSP.md

@@ -151,11 +151,12 @@ date; salt caasp-splunk-sh system.reboot --async
 watch "salt caasp-splunk-sh status.uptime --out=txt"
 
 # Reboot one indexer at a time (ping optional)
-salt caasp-splunk-idx-i-<IDHERE> test.ping --out=txt
-date; salt caasp-splunk-idx-i-<IDHERE> system.reboot --async
+salt 'caasp-splunk-idx-i-<IDHERE>' test.ping --out=txt
+salt 'caasp-splunk-idx-i-<IDHERE>' cmd.run 'df -h | egrep "[890][0-9]\%"'
+date; 'salt caasp-splunk-idx-i-<IDHERE>' system.reboot --async
 
 # Indexers take a while to restart
-watch "salt caasp-splunk-idx-i-<IDHERE> status.uptime --out=txt"
+watch "salt 'caasp-splunk-idx-i-<IDHERE>' status.uptime --out=txt"
 ```
 
 #### Wait for the Splunk indexing cluster to have four green checkmarks
@@ -170,24 +171,24 @@ Repeat the above patching steps for the additional indexers, waiting for `four`
 
 ```shell
 # Do the second indexer
-salt caasp-splunk-idx-i-<IDHERE> test.ping --out=txt
-salt caasp-splunk-idx-i-<IDHERE> cmd.run 'df -h | egrep "[890][0-9]\%"'
-date; salt caasp-splunk-idx-i-<IDHERE> system.reboot --async
+salt 'caasp-splunk-idx-i-<IDHERE>' test.ping --out=txt
+salt 'caasp-splunk-idx-i-<IDHERE>' cmd.run 'df -h | egrep "[890][0-9]\%"'
+date; salt 'caasp-splunk-idx-i-<IDHERE>' system.reboot --async
 
 # Indexers take a while to restart
-watch "salt caasp-splunk-idx-i-<IDHERE> status.uptime --out=txt"
+watch "salt 'caasp-splunk-idx-i-<IDHERE>' status.uptime --out=txt"
 ```
 
 #### Wait for the Splunk cluster to have four green checkmarks
 
 ```shell
 # Do the third indexer
-salt caasp-splunk-idx-i-<IDHERE> test.ping --out=txt
-salt caasp-splunk-idx-i-<IDHERE> cmd.run 'df -h | egrep "[890][0-9]\%"'
-date; salt caasp-splunk-idx-i-<IDHERE> system.reboot --async
+salt 'caasp-splunk-idx-i-<IDHERE>' test.ping --out=txt
+salt 'caasp-splunk-idx-i-<IDHERE>' cmd.run 'df -h | egrep "[890][0-9]\%"'
+date; salt 'caasp-splunk-idx-i-<IDHERE>' system.reboot --async
 
 # Indexers take a while to restart
-watch "salt caasp-splunk-idx-i-<IDHERE> status.uptime --out=txt"
+watch "salt 'caasp-splunk-idx-i-<IDHERE>' status.uptime --out=txt"
 
 # Verify all indexers rebooted (check for seconds less than a few thousand):
 salt 'caasp-splunk-idx-i-*' status.uptime --out=txt

Patching Notes.md

@@ -883,18 +883,18 @@ Today's patching is all XDR customer environments. Indexers and Searchheads will
 Run these commands on `GC Prod Salt Master`. These notes should patch all Splunk instances. 
 
 ```
-salt -C 'afs*local or afs*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' test.ping --out=txt
+salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed*com or frtib*com or la-*com or nga*com or nga*local' test.ping --out=txt
 
-salt -C 'afs*local or afs*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' cmd.run 'uptime'
+salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed*com or frtib*com or la-*com or nga*com or nga*local' cmd.run 'uptime'
 
 # Fred's kung fu for df -h:
-salt -C 'afs*local or afs*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' cmd.run 'df -h | egrep "[890][0-9]\%"'
+salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed*com or frtib*com or la-*com or nga*com or nga*local' cmd.run 'df -h | egrep "[890][0-9]\%"'
 
 # SKIP this one as long as Fred's kung fu works
-salt -C 'afs*local or afs*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' cmd.run 'df -h'
+salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed*com or frtib*com or la-*com or nga*com or nga*local' cmd.run 'df -h'
 
 # Upgrade the Packages
-salt -C 'afs*local or afs*com or la-*com or nga*com or nga*local or dc*com or bas-*com or frtib*com or ca-c19*com or dgi*com' pkg.upgrade
+salt -C 'afs*local or afs*com or bas-*com or ca-c19*com or dc*com or dgi*com or doed*com or frtib*com or la-*com or nga*com or nga*local' pkg.upgrade
 
 ```
 

Reposerver Notes.md

@@ -28,7 +28,7 @@ rpm --import 'name of key'
 rpm -qa 'name of key'*
 
 # visit site to view original hash of package via URL in this example for Sensu Go Agent 6.7; then download package
-wget --content-disposition https://packagecloud.io/sensu/stable/packages/el/7/sensu-go-agent-6.7.4-6494.x86_64.rpm/download.rpm
+wget --content-disposition https://packagecloud.io/sensu/stable/packages/el/7/sensu-go-agent-6.7.5-6587.x86_64.rpm/download.rpm
 
 # validate package signature with name of the package downloaded
 rpm -K 'name of package'

Sensu Go Upgrade Notes.md

@@ -18,6 +18,7 @@
  - [MSOCI-2027 ticket - Upgrade Sensu to 6.7.0](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2027)
  - [MSOCI-2173 ticket - Upgrade Sensu to 6.7.2](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2173)
  - [MSOCI-2244 ticket - Upgrade Sensu to 6.7.4](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2244)
+ - [MSOCI-2288 ticket - Upgrade Sensu to 6.7.5](https://jira.xdr.accenturefederalcyber.com/browse/MSOCI-2288)
 
 ### Sensu Go Upgrade Process
 ---
@@ -63,10 +64,10 @@ Starting with Moose and Internal infra within `GC TEST`.  After deployment is ve
 6. `GC Test` first; `GC PROD` second; From target servers; clean out the cache
     ```
     # XDR Infrastructure - be sure to note the different Salt minions to target between TEST and PROD
-    date; salt -C '* not ( afs* or nga* or ma-* or dc-c19* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'yum clean all && yum makecache fast'
+    date; salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'yum clean all && yum makecache fast'
 
     # From target servers; view the available packages
-    salt -C '* not ( afs* or nga* or ma-* or dc-c19* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
+    salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'yum --disablerepo="*" --enablerepo="msoc" list available'
 
     # Customer Slices Search Heads Only
     date; salt -C '*-sh* and not *moose* and not fm-shared-search*' cmd.run 'yum clean all && yum makecache fast'
@@ -111,9 +112,9 @@ Starting with Moose and Internal infra within `GC TEST`.  After deployment is ve
 7. Stop / Update / Reload daemon / Start agent on minions `systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent`
     ```
     # XDR Infrastructure 
-    salt -C '* not ( afs* or nga* or ma-* or dc-c19* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'sensu-agent version'
+    salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'sensu-agent version'
     
-    date; salt -C '* not ( afs* or nga* or ma-* or dc-c19* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
+    date; salt -C '* not ( afs* or nga* or ma-* or dc-c19* or doed* or la-c19* or bas-* or ca-c19* or frtib* or dgi* or vmray* or sensu* )' cmd.run 'systemctl stop sensu-agent && yum update -y sensu-go-agent && systemctl daemon-reload && systemctl start sensu-agent'
 
     # LCPs
     salt -C '* not *.local not *.pvt.xdr.accenturefederalcyber.com' cmd.run 'sensu-agent version'