From 0f53b4d7038a591a04e8e0b4809176e7c0c42541 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 12 Aug 2020 10:39:31 -0400
Subject: [PATCH] set esheapsize and filebeat config for import node

---
 salt/filebeat/etc/filebeat.yml | 4 ++--
 setup/so-setup                 | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/salt/filebeat/etc/filebeat.yml b/salt/filebeat/etc/filebeat.yml
index 2b8a4118f..a4525b494 100644
--- a/salt/filebeat/etc/filebeat.yml
+++ b/salt/filebeat/etc/filebeat.yml
@@ -74,7 +74,7 @@ filebeat.modules:
 # List of prospectors to fetch data.
 filebeat.inputs:
 #------------------------------ Log prospector --------------------------------
-{%- if grains['role'] == 'so-sensor' or grains['role'] == "so-eval" or grains['role'] == "so-helix" or grains['role'] == "so-heavynode" or grains['role'] == "so-standalone" %}
+{%- if grains['role'] in ['so-sensor', "so-eval", "so-helix", "so-heavynode", "so-standalone", "so-import"] %}
 - type: udp
   enabled: true
   host: "0.0.0.0:514"
@@ -253,7 +253,7 @@ output.{{ type }}:
   {%- endfor %}
 {%- else %}
 #----------------------------- Elasticsearch/Logstash output ---------------------------------
-  {%- if grains['role'] == "so-eval" %}
+  {%- if grains['role'] in ["so-eval", "so-import"] %}
 output.elasticsearch:
   enabled: true
   hosts: ["{{ MANAGER }}:9200"]
diff --git a/setup/so-setup b/setup/so-setup
index 4a8cf259e..9c28ab814 100755
--- a/setup/so-setup
+++ b/setup/so-setup
@@ -279,7 +279,7 @@ if [[ $is_helix ||  $is_manager || $is_import ]]; then
 	whiptail_homenet_manager
 fi
 
-if [[ $is_helix || $is_manager || $is_node ]]; then
+if [[ $is_helix || $is_manager || $is_node || $is_import ]]; then
 	set_base_heapsizes
 fi