Remove old modules

salt/filebeat/etc/module_config.yml.jinja

@@ -3,7 +3,7 @@
 - module: {{ module }}
   {%- for fileset in MODULES.modules[module] %}
   {{ fileset }}:
-    enabled: {{ MODULES.modules[module][fileset].enabled }}
+    enabled: {{ MODULES.modules[module][fileset].enabled|string|lower }}
     {#- only manage the settings if the fileset is enabled #}
     {%- if MODULES.modules[module][fileset].enabled %}
       {%- for var, value in MODULES.modules[module][fileset].items() %}

salt/filebeat/securityoniondefaults.yaml

@@ -21,6 +21,8 @@ securityonion_filebeat:
       log:
         enabled: true
         var.paths: ["/logs/redis.log"]
+      slowlog:
+        enabled: false
     suricata:
       eve:
         enabled: true

salt/filebeat/thirdpartydefaults.yaml

@@ -199,12 +199,6 @@ third_party_filebeat:
     okta:
       system:
         enabled: false
-    pesando:
-      dfw:
-        enabled: false 
-        var.input: udp
-        var.syslog_host: 0.0.0.0
-        var.syslog_port: 9001
     proofpoint:
       emailsecurity:
         enabled: false 
@@ -251,17 +245,6 @@ third_party_filebeat:
         var.input: udp
         var.syslog_host: 0.0.0.0
         var.syslog_port: 9520
-    threatintel:
-      abuseurl:
-        enabled: false
-      abusemalware:
-        enabled: false
-      misp: 
-        enabled: false
-      otx:
-        enabled: false 
-      anomali:
-        enabled: false
     tomcat:
       log:
         enabled: false