CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-20 07:53:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

add default pillar value for pillarWatch

Browse Source
This commit is contained in:
m0duspwnens
2024-05-02 11:58:39 -04:00
parent 956ae7a7ae
commit 33d1170a91
3 changed files with 186 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
salt/salt/files/engines.conf
View File

@@ -4,3 +4,30 @@ engines_dirs:
engines:
- checkmine:
interval: 60
- pillarWatch:
fpa:
- files:
- /opt/so/saltstack/local/pillar/idstools/soc_idstools.sls
- /opt/so/saltstack/local/pillar/idstools/adv_idstools.sls
pillar: idstools.config.ruleset
default: ETOPEN
actions:
from:
'*':
to:
'*':
- cmd.run:
cmd: /usr/sbin/so-rule-update
- files:
- /opt/so/saltstack/local/pillar/idstools/soc_idstools.sls
- /opt/so/saltstack/local/pillar/idstools/adv_idstools.sls
pillar: idstools.config.oinkcode
default: ''
actions:
from:
'*':
to:
'*':
- cmd.run:
cmd: /usr/sbin/so-rule-update
interval: 10