CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 02:02:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Filebeat Module - Add SSL key

Browse Source
This commit is contained in:
Mike Reeves
2018-06-07 17:35:10 -04:00
parent 6f05f788f1
commit 1519bf3fc6
2 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/filebeat/etc/filebeat.yml
View File

@@ -843,7 +843,7 @@ output.logstash:
ssl.certificate: "/usr/share/filebeat/filebeat.crt" ssl.certificate: "/usr/share/filebeat/filebeat.crt"
# Client Certificate Key # Client Certificate Key
#ssl.key: "/etc/pki/client/cert.key" ssl.key: "/usr/share/filebeat/filebeat.key"
# Optional passphrase for decrypting the Certificate Key. # Optional passphrase for decrypting the Certificate Key.
#ssl.key_passphrase: '' #ssl.key_passphrase: ''

9
salt/filebeat/init.sls
View File

@@ -35,9 +35,15 @@ filebeatcrt:
- name: /opt/so/conf/filebeat/etc/pki/filebeat.crt - name: /opt/so/conf/filebeat/etc/pki/filebeat.crt
- source: salt://filebeat/files/filebeat.crt - source: salt://filebeat/files/filebeat.crt
filebeatkey:
file.managed:
- name: /opt/so/conf/filebeat/etc/pki/filebeat.key
- source: salt://filebeat/files/filebeat.key
so-filebeat: so-filebeat:
docker_container.running: docker_container.running:
- image: toosmoth/so-filebeat:beta - image: toosmooth/so-filebeat:beta
- hostname: so-filebeat - hostname: so-filebeat
- user: root - user: root
- binds: - binds:
@@ -45,5 +51,6 @@ so-filebeat:
- /opt/so/conf/filebeat/etc/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro - /opt/so/conf/filebeat/etc/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro
- /nsm/bro/spool/manager:/nsm/bro/spool:ro - /nsm/bro/spool/manager:/nsm/bro/spool:ro
- /opt/so/conf/filebeat/etc/pki/filebeat.crt:/usr/share/filebeat/filebeat.crt:ro - /opt/so/conf/filebeat/etc/pki/filebeat.crt:/usr/share/filebeat/filebeat.crt:ro
- /opt/so/conf/filebeat/etc/pki/filebeat.key:/usr/share/filebeat/filebeat.key:ro
- /etc/ssl/certs/intca.crt:/usr/share/filebeat/intraca.crt:ro - /etc/ssl/certs/intca.crt:/usr/share/filebeat/intraca.crt:ro
- network_mode: so-elastic-net - network_mode: so-elastic-net