CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

FIX: curator should exclude so-case* indices #7270

Browse Source
This commit is contained in:
Doug Burks
2022-02-21 09:00:05 -05:00
committed by GitHub
parent fc0e27a7ae
commit 1abd824c5f
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/curator/files/action/delete.yml
View File

@@ -18,6 +18,10 @@ actions:
- filtertype: pattern - filtertype: pattern
kind: regex kind: regex
value: '^(logstash-.*|so-.*)$' value: '^(logstash-.*|so-.*)$'
- filtertype: pattern
kind: regex
value: '^(so-case.*)$'
exclude: True
- filtertype: space - filtertype: space
source: creation_date source: creation_date
use_age: True use_age: True