CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-11 11:42:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

LS salt module - single pipeline setup

Browse Source
This commit is contained in:
Mike Reeves
2018-02-12 12:49:57 -05:00
parent 19809fa8d6
commit 37c5255800
4 changed files with 5 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/logstash/files/logstash.yml
View File

@@ -1,6 +1,6 @@
path.config: /usr/share/logstash/pipeline
http.host: 0.0.0.0 http.host: 0.0.0.0
#queue.type: persisted queue.type: persisted
#queue.max_bytes: 1gb queue.max_bytes: 1gb
pipeline.workers: 1 pipeline.workers: 1
path.logs: /var/log/logstash path.logs: /var/log/logstash
path.settings: /usr/share/logstash/settings

13
salt/logstash/files/pipeline.yml
View File

@@ -1,13 +0,0 @@
{%- set freq = salt['pillar.get']('master:freq', '0') %}
{%- set domainstats = salt['pillar.get']('master:domainstats', '0') %}
- pipeline.id: sodefault
path.config: "/usr/share/logstash/pipeline"
- pipeline.id: custom
path.config: "/usr/share/logstash/custom"
{%- if freq == '1' %}
- pipeline.id: freq
path.config: "/usr/share/logstash/freq"
{%- if domainstats == '1' %}
- pipeline.id: domainstats
path.config: "/usr/share/logstash/domainstats"
{%- endif %}

0
salt/logstash/files/custom/Drop.Your.Custom.Parsers.Here.conf → salt/logstash/files/pipeline/Drop.Your.Custom.Parsers.Here.conf
View File

4
salt/logstash/init.sls
View File

@@ -42,7 +42,7 @@ logstash:
# Create a directory for people to drop their own custom parsers into # Create a directory for people to drop their own custom parsers into
lscustdir: lscustdir:
file.directory: file.directory:
- name: /opt/so/conf/logstash/custom - name: /opt/so/conf/logstash/pipeline
- user: 931 - user: 931
- group: 939 - group: 939
- makedirs: True - makedirs: True
@@ -102,7 +102,7 @@ so-logstash:
- /opt/so/conf/logstash/logstash.yml:/usr/share/logstash/config/logstash.yml:ro - /opt/so/conf/logstash/logstash.yml:/usr/share/logstash/config/logstash.yml:ro
- /opt/so/conf/logstash/logstash-template.json:/logstash-template.json:ro - /opt/so/conf/logstash/logstash-template.json:/logstash-template.json:ro
- /opt/so/conf/logstash/beats-template.json:/beats-template.json:ro - /opt/so/conf/logstash/beats-template.json:/beats-template.json:ro
- /opt/so/conf/logstash/custom:/usr/share/logstash/custom:ro - /opt/so/conf/logstash/pipeline:/usr/share/logstash/pipeline:rw
- /opt/so/rules:/etc/nsm/rules:ro - /opt/so/rules:/etc/nsm/rules:ro
- /nsm/import:/nsm/import:ro - /nsm/import:/nsm/import:ro
- /nsm/logstash:/usr/share/logstash/data:rw - /nsm/logstash:/usr/share/logstash/data:rw