CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix the Scheduling

Browse Source
This commit is contained in:
Mike Reeves
2018-11-26 11:03:35 -05:00
parent d49f7171ba
commit 0419d899a1
3 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pillar/top.sls
View File

@@ -1,20 +1,17 @@
base: base:
'G@role:so-sensor': 'G@role:so-sensor':
- sensors.schedule
- sensors.{{ grains.host }} - sensors.{{ grains.host }}
- static - static
- firewall.* - firewall.*
- brologs - brologs
'G@role:so-master': 'G@role:so-master':
- masters.schedule
- masters.{{ grains.host }} - masters.{{ grains.host }}
- static - static
- firewall.* - firewall.*
- data.* - data.*
'G@role:so-eval': 'G@role:so-eval':
- masters.schedule
- masters.{{ grains.host }} - masters.{{ grains.host }}
- static - static
- firewall.* - firewall.*
@@ -22,7 +19,6 @@ base:
- brologs - brologs
'G@role:so-node': 'G@role:so-node':
- nodes.schedule
- nodes.{{ grains.host }} - nodes.{{ grains.host }}
- static - static
- firewall.* - firewall.*

5
salt/schedule.sls Normal file
View File

@@ -0,0 +1,5 @@
schedule:
highstate:
funtion: state.highstate
minutes: 15
maxrunning: 1

8
salt/top.sls
View File

@@ -10,6 +10,7 @@ base:
- bro - bro
{%- endif %} {%- endif %}
- filebeat - filebeat
- schedule
'G@role:so-eval': 'G@role:so-eval':
- ca - ca
@@ -26,6 +27,7 @@ base:
- suricata - suricata
- bro - bro
- utility - utility
- schedule
'G@role:so-master': 'G@role:so-master':
@@ -40,6 +42,7 @@ base:
- logstash - logstash
- kibana - kibana
- utility - utility
- schedule
# Storage node logic # Storage node logic
@@ -48,6 +51,7 @@ base:
- common - common
- firewall - firewall
- logstash - logstash
- schedule
'G@role:so-node and I@node:node_type:hot': 'G@role:so-node and I@node:node_type:hot':
- match: pillar - match: pillar
@@ -55,12 +59,14 @@ base:
- firewall - firewall
- logstash - logstash
- elasticsearch - elasticsearch
- schedule
'G@role:so-node and I@node:node_type:warm': 'G@role:so-node and I@node:node_type:warm':
- match: pillar - match: pillar
- common - common
- firewall - firewall
- elasticsearch - elasticsearch
- schedule
'G@role:so-node and I@node:node_type:storage': 'G@role:so-node and I@node:node_type:storage':
- match: compound - match: compound
@@ -68,9 +74,11 @@ base:
- firewall - firewall
- logstash - logstash
- elasticsearch - elasticsearch
- schedule
'G@role:mastersensor': 'G@role:mastersensor':
- common - common
- firewall - firewall
- sensor - sensor
- master - master
- schedule