exclude zeekcaptureloss when suricata metadata selected https://github.com/Security-Onion-Solutions/securityonion/issues/3206

2026-04-28 15:37:51 +02:00 · 2021-03-01 13:31:05 -05:00
parent 8f8651c52c
commit 3983e08fe5
2 changed files with 13 additions and 0 deletions
@@ -29,6 +29,9 @@ tgrafsyncscripts:
    - file_mode: 700
    - template: jinja
    - source: salt://telegraf/scripts
+{% if salt['pillar.get']('global:mdengine', 'ZEEK') == 'SURICATA' %}
+    - exclude_pat: zeekcaptureloss.sh
+{% endif %}

 tgrafconf:
  file.managed: