CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 09:42:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Suricata Module - Fix Jinja

Browse Source
This commit is contained in:
Mike Reeves
2018-11-13 14:10:21 -05:00
parent 7a3f56da97
commit 0a3c20fccf
3 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/filebeat/etc/filebeat.yml
View File

@@ -11,7 +11,7 @@ filebeat.modules:
# List of prospectors to fetch data. # List of prospectors to fetch data.
filebeat.prospectors: filebeat.prospectors:
#------------------------------ Log prospector -------------------------------- #------------------------------ Log prospector --------------------------------
{%- if BROVER != SURICATA %} {%- if BROVER != 'SURICATA' %}
{%- for LOGNAME in salt['pillar.get']('brologs:enabled', '') %} {%- for LOGNAME in salt['pillar.get']('brologs:enabled', '') %}
- type: log - type: log
paths: paths:

2
salt/suricata/files/suricataMETA.yaml
View File

@@ -280,7 +280,6 @@ outputs:
append: yes append: yes
#extended: yes # enable this for extended logging information #extended: yes # enable this for extended logging information
#custom: yes # enabled the custom logging format (defined by customformat) #custom: yes # enabled the custom logging format (defined by customformat)
#customformat: "%{%D-%H:%M:%S}t.%z %{X-Forwarded-For}i %H %m %h %u %s %B %a:%p -> %A:%P"
#filetype: regular # 'regular', 'unix_stream' or 'unix_dgram' #filetype: regular # 'regular', 'unix_stream' or 'unix_dgram'
# a line based log of TLS handshake parameters (no alerts) # a line based log of TLS handshake parameters (no alerts)
@@ -290,7 +289,6 @@ outputs:
append: yes append: yes
#extended: yes # Log extended information like fingerprint #extended: yes # Log extended information like fingerprint
#custom: yes # enabled the custom logging format (defined by customformat) #custom: yes # enabled the custom logging format (defined by customformat)
#customformat: "%{%D-%H:%M:%S}t.%z %a:%p -> %A:%P %v %n %d %D"
#filetype: regular # 'regular', 'unix_stream' or 'unix_dgram' #filetype: regular # 'regular', 'unix_stream' or 'unix_dgram'
# output TLS transaction where the session is resumed using a # output TLS transaction where the session is resumed using a
# session id # session id

2
salt/suricata/init.sls
View File

@@ -83,4 +83,4 @@ so-suricata:
- network_mode: host - network_mode: host
- watch: - watch:
- file: /opt/so/conf/suricata/suricata.yaml - file: /opt/so/conf/suricata/suricata.yaml
- file: /opt/so/conf/rules/all.rules - file: /opt/so/conf/suricata/rules/all.rules