CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

disable steno in so-status for import node

Browse Source
This commit is contained in:
m0duspwnens
2020-12-16 13:03:24 -05:00
parent 81e2b4d572
commit 2e278586f2
2 changed files with 7 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
salt/pcap/init.sls
View File

@@ -135,16 +135,17 @@ append_so-steno_so-status.conf:
- text: so-steno - text: so-steno
- unless: grep -q so-steno /opt/so/conf/so-status/so-status.conf - unless: grep -q so-steno /opt/so/conf/so-status/so-status.conf
{% if STENOOPTIONS.status == 'running' %}
delete_so-steno_so-status.disabled: {% if not STENOOPTIONS.start %}
file.uncomment:
- name: /opt/so/conf/so-status/so-status.conf
- regex: ^so-steno$
{% elif STENOOPTIONS.status == 'stopped' %}
so-steno_so-status.disabled: so-steno_so-status.disabled:
file.comment: file.comment:
- name: /opt/so/conf/so-status/so-status.conf - name: /opt/so/conf/so-status/so-status.conf
- regex: ^so-steno$ - regex: ^so-steno$
{% else %}
delete_so-steno_so-status.disabled:
file.uncomment:
- name: /opt/so/conf/so-status/so-status.conf
- regex: ^so-steno$
{% endif %} {% endif %}
{% else %} {% else %}

6
setup/so-functions
View File

@@ -1941,12 +1941,6 @@ sensor_pillar() {
if [ "$HNSENSOR" != 'inherit' ]; then if [ "$HNSENSOR" != 'inherit' ]; then
echo " hnsensor: $HNSENSOR" >> "$pillar_file" echo " hnsensor: $HNSENSOR" >> "$pillar_file"
fi fi
if [[ $is_import ]]; then
printf '%s\n'\
"steno:"\
" enabled: false" >> "$pillar_file"
fi
} }
set_default_log_size() { set_default_log_size() {