mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-11 03:32:53 +01:00
Logstash Module - Add plugin config based on node type
This commit is contained in:
@@ -2,4 +2,4 @@
|
|||||||
node:
|
node:
|
||||||
ls_heapsize: CHANGEME
|
ls_heapsize: CHANGEME
|
||||||
es_heapsize: CHANGEME
|
es_heapsize: CHANGEME
|
||||||
nodetype: CHANGEME
|
node_type: CHANGEME
|
||||||
|
|||||||
@@ -25,6 +25,7 @@
|
|||||||
{% set lsaccessip = salt['pillar.get']('master:lsaccessip', '') %}
|
{% set lsaccessip = salt['pillar.get']('master:lsaccessip', '') %}
|
||||||
{% set freq = salt['pillar.get']('master:freq', '0') %}
|
{% set freq = salt['pillar.get']('master:freq', '0') %}
|
||||||
{% set dstats = salt['pillar.get']('master:domainstats', '0') %}
|
{% set dstats = salt['pillar.get']('master:domainstats', '0') %}
|
||||||
|
{% set nodetype = salt['pillar_get']('node:node_type', 'master') %}
|
||||||
|
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
@@ -58,6 +59,15 @@ lssync:
|
|||||||
- group: 939
|
- group: 939
|
||||||
- template: jinja
|
- template: jinja
|
||||||
|
|
||||||
|
# Copy the config file for enabled logstash plugins/parsers
|
||||||
|
lsconfsync:
|
||||||
|
file.managed:
|
||||||
|
- name: /opt/so/donf/logstash/conf.enabled.txt
|
||||||
|
- source: salt://logstash/conf/conf.enabled.txt.{{ nodetype }}
|
||||||
|
- user: 931
|
||||||
|
- group: 939
|
||||||
|
- template: jinja
|
||||||
|
|
||||||
# Create the import directory
|
# Create the import directory
|
||||||
importdir:
|
importdir:
|
||||||
file.directory:
|
file.directory:
|
||||||
|
|||||||
Reference in New Issue
Block a user