CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 02:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Logstash Module - Clean up logic around master

Browse Source
This commit is contained in:
Mike Reeves
2018-09-18 17:43:03 -04:00
parent 986e3df015
commit 131c72cc40
17 changed files with 34 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/logstash/files/dynamic/9000_output_bro.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -24,3 +25,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9001_output_switch.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -21,3 +22,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9002_output_import.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Updated by: Doug Burks # Updated by: Doug Burks
# Last Update: 5/16/2017 # Last Update: 5/16/2017
@@ -21,3 +22,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9004_output_flow.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -21,3 +22,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9026_output_dhcp.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -20,3 +21,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9029_output_esxi.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -19,3 +20,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9030_output_greensql.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -19,3 +20,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9031_output_iis.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -20,3 +21,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9032_output_mcafee.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -20,3 +21,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9033_output_snort.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -23,3 +24,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9034_output_syslog.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -22,3 +23,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9200_output_firewall.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -23,3 +24,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9300_output_windows.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -21,3 +22,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9301_output_dns_windows.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -21,3 +22,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9400_output_suricata.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -21,3 +22,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9500_output_beats.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Wes Lambert # Author: Wes Lambert
# Last Update: 12/11/2017 # Last Update: 12/11/2017
@@ -19,3 +20,4 @@ output {
} }
} }
} }
{%- endif %}

2
salt/logstash/files/dynamic/9998_output_test_data.conf
View File

@@ -1,3 +1,4 @@
{%- if grains['role'] != 'so-master' %}
{%- set ES = salt['pillar.get']('mainip'. '') %} {%- set ES = salt['pillar.get']('mainip'. '') %}
# Author: Justin Henderson # Author: Justin Henderson
# SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics # SANS Instructor and author of SANS SEC555: SIEM and Tactical Analytics
@@ -20,3 +21,4 @@ output {
} }
} }
} }
{%- endif %}