CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

so-setup-network updates

Browse Source
This commit is contained in:
Mike Reeves
2018-02-15 10:31:40 -05:00
parent e5afebb880
commit 3989a6af94
1 changed files with 42 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
so-setup-network.sh
View File

@@ -35,7 +35,7 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
"EVALMODE" "Evaluate all the things" ON \
"SENSORONLY" "Sensor join existing grid" OFF \
"MASTERONLY" "Start a new grid with no sensor running on it" OFF \
"MASTERSENSOR" "Start a new grid with a sensor" OFF 3>&1 1>&2 2>&3 )
"BACKENDNODE" "Add a node to the back end" OFF 3>&1 1>&2 2>&3 )
# Get list of NICS if it isn't master only
if [ $INSTALLTYPE != 'MASTERONLY' ]; then
@@ -96,6 +96,10 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
"TALOSET" "Snort Subscriber (Talos) ruleset and Emerging Threats NoGPL ruleset - requires Snort Subscriber oinkcode" OFF \
"TALOS" "Snort Subscriber (Talos) ruleset only and set a Snort Subscriber policy - requires Snort Subscriber oinkcode" OFF 3>&1 1>&2 2>&3 )
# Get the code if it isn't ET Open
if
fi
fi
@@ -103,6 +107,13 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
## Do all the things!! ##
#########################
# Global Variable Section
# Find out the total megarams
TOTAL_MEM=`grep MemTotal /proc/meminfo | awk '{print $2}' | sed -r 's/.{3}$//'`
# End Global Variable Section
# Copy over the SSH key
if [ $INSTALLTYPE == 'SENSORONLY' ]; then
# Generate SSH Key
@@ -213,7 +224,22 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
fi
# Do that same thing on all the others but drop em into the right place
if [ $INSTALLTYPE == 'MASTERONLY' ]; then
if [ $INSTALLTYPE != 'SENSORONLY' ]; then
# Do some math
# If total memory is less than 8GB, we keep the default of 600m for heap size
if [ $TOTAL_MEM -lt 8000 ] ; then
ES_HEAP_SIZE="600m"
LS_HEAP_SIZE="1g"
elif [ $TOTAL_MEM -ge 124000 ]; then
# Set a max of 31GB for heap size
# https://www.elastic.co/guide/en/elasticsearch/guide/current/heap-sizing.html
ES_HEAP_SIZE="31000m"
LS_HEAP_SIZE="$ES_HEAP_SIZE"
else
# Set heap size to 25% of available memory
ES_HEAP_SIZE=$(($TOTAL_MEM / 4))"m"
LS_HEAP_SIZE="$ES_HEAP_SIZE"
fi
# Create the grains file for the Master
touch /etc/salt/grains
@@ -233,6 +259,20 @@ if (whiptail --title "Security Onion Setup" --yesno "Are you sure you want to in
# Create the pillar
touch /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo "master:" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " esaccessip: 127.0.0.1" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " esheap: $ES_HEAP_SIZE" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " esclustername: {{ grains.host }}" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
if [ $INSTALLTYPE == 'EVALMODE' ]; then
echo " freq: 1" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " domainstats: 1" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
else
echo " freq: 0" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " domainstats: 0" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
fi
echo " lsheap: $LS_HEAP_SIZE" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " lsaccessip: 127.0.0.1" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
echo " elastalert: 1" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
salt-call state.highstate
salt-key -qya $HOSTNAME