Move In Day

salt/curator/defaults.yaml

@@ -0,0 +1,179 @@
+# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
+# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at 
+# https://securityonion.net/license; you may not use this file except in compliance with the
+# Elastic License 2.0.
+
+elasticsearch:
+  index_settings:
+    so-aws:
+      warm: 7
+      close: 30
+      delete: 365
+    so-azure:
+      warm: 7
+      close: 30
+      delete: 365
+    so-barracuda:
+      warm: 7
+      close: 30
+      delete: 365
+    so-beats:
+      warm: 7
+      close: 30
+      delete: 365
+    so-bluecoat:
+      warm: 7
+      close: 30
+      delete: 365
+    so-cef:
+      warm: 7
+      close: 30
+      delete: 365
+    so-checkpoint:
+      warm: 7
+      close: 30
+      delete: 365
+    so-cisco:
+      warm: 7
+      close: 30
+      delete: 365
+    so-cyberark:
+      warm: 7
+      close: 30
+      delete: 365
+    so-cylance:
+      warm: 7
+      close: 30
+      delete: 365
+    so-elasticsearch:
+      warm: 7
+      close: 30
+      delete: 365
+    so-endgame:
+      warm: 7
+      close: 30
+      delete: 365
+    so-f5:
+      warm: 7
+      close: 30
+      delete: 365
+    so-firewall:
+      warm: 7
+      close: 30
+      delete: 365
+    so-fortinet:
+      warm: 7
+      close: 30
+      delete: 365
+    so-gcp:
+      warm: 7
+      close: 30
+      delete: 365
+    so-google_workspace:
+      warm: 7
+      close: 30
+      delete: 365
+    so-ids:
+      warm: 7
+      close: 30
+      delete: 365
+    so-imperva:
+      warm: 7
+      close: 30
+      delete: 365
+    so-import:
+      warm: 7
+      close: 30
+      delete: 365
+    so-infoblox:
+      warm: 7
+      close: 30
+      delete: 365
+    so-juniper:
+      warm: 7
+      close: 30
+      delete: 365
+    so-kibana:
+      warm: 7
+      close: 30
+      delete: 365
+    so-logstash:
+      warm: 7
+      close: 30
+      delete: 365
+    so-microsoft:
+      warm: 7
+      close: 30
+      delete: 365
+    so-misp:
+      warm: 7
+      close: 30
+      delete: 365
+    so-netflow:
+      warm: 7
+      close: 30
+      delete: 365
+    so-netscout:
+      warm: 7
+      close: 30
+      delete: 365
+    so-o365:
+      warm: 7
+      close: 30
+      delete: 365
+    so-okta:
+      warm: 7
+      close: 30
+      delete: 365
+    so-osquery:
+      warm: 7
+      close: 30
+      delete: 365
+    so-proofpoint:
+      warm: 7
+      close: 30
+      delete: 365
+    so-radware:
+      warm: 7
+      close: 30
+      delete: 365
+    so-redis:
+      warm: 7
+      close: 30
+      delete: 365
+    so-snort:
+      warm: 7
+      close: 30
+      delete: 365
+    so-snyk:
+      warm: 7
+      close: 30
+      delete: 365
+    so-sonicwall:
+      warm: 7
+      close: 30
+      delete: 365
+    so-sophos:
+      warm: 7
+      close: 30
+      delete: 365
+    so-strelka:
+      warm: 7
+      close: 30
+      delete: 365
+    so-syslog:
+      warm: 7
+      close: 30
+      delete: 365
+    so-tomcat:
+      warm: 7
+      close: 30
+      delete: 365
+    so-zeek:
+      warm: 7
+      close: 30
+      delete: 365
+    so-zscaler:
+      warm: 7
+      close: 30
+      delete: 365