CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Correct var names for jinja

Browse Source
This commit is contained in:
Jason Ertel
2021-12-27 18:01:15 -05:00
parent ae7a4b6528
commit 09626deb05
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
salt/soc/files/soc/soc.json
View File

@@ -69,7 +69,7 @@
"index": "{{ ES_INDEX_PATTERNS }}", "index": "{{ ES_INDEX_PATTERNS }}",
"cacheMs": {{ ES_FIELDCAPS_CACHE }}, "cacheMs": {{ ES_FIELDCAPS_CACHE }},
"verifyCert": false, "verifyCert": false,
"casesEnabled": {{ 'true' if CASEMODULE == 'soc' else 'false' }}, "casesEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"timeoutMs": {{ API_TIMEOUT }} "timeoutMs": {{ API_TIMEOUT }}
}, },
"influxdb": { "influxdb": {
@@ -87,19 +87,19 @@
"refreshIntervalMs": 30000, "refreshIntervalMs": 30000,
"offlineThresholdMs": 900000 "offlineThresholdMs": 900000
}, },
{% if CASEMODULE == 'thehive' and THEHIVEKEY != '' %} {% if CASE_MODULE == 'thehive' and THEHIVEKEY != '' %}
"thehive": { "thehive": {
"hostUrl": "http://{{ MANAGERIP }}:9000/thehive", "hostUrl": "http://{{ MANAGERIP }}:9000/thehive",
"key": "{{ THEHIVEKEY }}", "key": "{{ THEHIVEKEY }}",
"verifyCert": false "verifyCert": false
}, },
{% elif CASEMODULE == 'elasticcases' %} {% elif CASE_MODULE == 'elasticcases' %}
"elasticcases": { "elasticcases": {
"hostUrl": "https://{{ MANAGERIP }}:5601", "hostUrl": "https://{{ MANAGERIP }}:5601",
"username": "{{ ES_USER }}", "username": "{{ ES_USER }}",
"password": "{{ ES_PASS }}", "password": "{{ ES_PASS }}",
}, },
{% elif CASEMODULE == 'generichttp' %} {% elif CASE_MODULE == 'generichttp' %}
"generichttp": { "generichttp": {
{{ GENERIC_CASE_CONFIG }} {{ GENERIC_CASE_CONFIG }}
}, },
@@ -160,7 +160,7 @@
"mostRecentlyUsedLimit": 5, "mostRecentlyUsedLimit": 5,
"ackEnabled": false, "ackEnabled": false,
"escalateEnabled": true, "escalateEnabled": true,
"escalateRelatedEventsEnabled": {{ 'true' if CASEMODULE == 'soc' else 'false' }}, "escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"eventFields": {{ hunt_eventfields | json }}, "eventFields": {{ hunt_eventfields | json }},
"queryBaseFilter": "", "queryBaseFilter": "",
"queryToggleFilters": [], "queryToggleFilters": [],
@@ -181,7 +181,7 @@
"mostRecentlyUsedLimit": 5, "mostRecentlyUsedLimit": 5,
"ackEnabled": true, "ackEnabled": true,
"escalateEnabled": true, "escalateEnabled": true,
"escalateRelatedEventsEnabled": {{ 'true' if CASEMODULE == 'soc' else 'false' }}, "escalateRelatedEventsEnabled": {{ 'true' if CASE_MODULE == 'soc' else 'false' }},
"eventFields": {{ alerts_eventfields | json }}, "eventFields": {{ alerts_eventfields | json }},
"queryBaseFilter": "event.dataset:alert", "queryBaseFilter": "event.dataset:alert",
"queryToggleFilters": [ "queryToggleFilters": [