CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-27 02:13:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

configure and enable/disable sensoroni via ui

Browse Source
This commit is contained in:
m0duspwnens
2023-05-12 14:26:46 -04:00
parent e342dae818
commit 00d1ca0b62
11 changed files with 216 additions and 123 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
salt/sensoroni/files/sensoroni.json
View File

@@ -1,43 +1,29 @@
{%- from 'vars/globals.map.jinja' import GLOBALS -%}
{%- set ANALYZE_TIMEOUT_MS = salt['pillar.get']('sensoroni:analyze_timeout_ms', 900000) %}
{%- set ANALYZE_PARALLEL_LIMIT = salt['pillar.get']('sensoroni:analyze_parallel_limit', 5) %}
{%- set CHECKININTERVALMS = salt['pillar.get']('sensoroni:node_checkin_interval_ms', 10000) %}
{%- set ROLE = grains.id.split('_') | last %}
{%- if ROLE in ['eval', 'standalone', 'sensor', 'heavynode'] %}
{%- set STENODEFAULT = True %}
{%- else %}
{%- set STENODEFAULT = False %}
{%- endif %}
{%- set STENOENABLED = salt['pillar.get']('steno:enabled', STENODEFAULT) %}
{%- if ROLE in ['eval', 'standalone', 'import', 'manager', 'managersearch'] %}
{%- set ANALYZEDEFAULT = True %}
{%- else %}
{%- set ANALYZEDEFAULT = False %}
{%- endif %}
{%- set ANALYZEENABLED = salt['pillar.get']('sensoroni:analyze_enabled', ANALYZEDEFAULT) %}
{%- from 'vars/globals.map.jinja' import GLOBALS %}
{%- from 'sensoroni/map.jinja' import SENSORONIMERGED %}
{%- from 'pcap/config.map.jinja' import PCAPMERGED %}
{
"logFilename": "/opt/sensoroni/logs/sensoroni.log",
"logLevel":"info",
"agent": {
"nodeId": "{{ GLOBALS.hostname | lower }}",
"role": "{{ GLOBALS.role }}",
"description": {{ GLOBALS.description | tojson }},
"description": {{ SENSORONIMERGED.config.node_description | tojson }},
"address": "{{ GLOBALS.node_ip }}",
"model": "{{ GLOBALS.so_model }}",
"pollIntervalMs": {{ CHECKININTERVALMS if CHECKININTERVALMS else 10000 }},
"pollIntervalMs": {{ SENSORONIMERGED.config.node_checkin_interval_ms }},
"serverUrl": "https://{{ GLOBALS.url_base }}/sensoroniagents",
"verifyCert": false,
"modules": {
{%- if ANALYZEENABLED %}
{%- if SENSORONIMERGED.config.analyze.enabled %}
"analyze": {
"timeoutMs": {{ ANALYZE_TIMEOUT_MS }},
"parallelLimit": {{ ANALYZE_PARALLEL_LIMIT }}
"timeoutMs": {{ SENSORONIMERGED.config.analyze_timeout_ms }},
"parallelLimit": {{ SENSORONIMERGED.config.analyze_parallel_limit }}
},
{%- endif %}
"importer": {},
"statickeyauth": {
"apiKey": "{{ GLOBALS.sensoroni_key }}"
{%- if STENOENABLED %}
{%- if PCAPMERGED.enabled %}
},
"stenoquery": {
"executablePath": "/opt/sensoroni/scripts/stenoquery.sh",