mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
LS salt module - Add conditional options
This commit is contained in:
@@ -15,6 +15,9 @@
|
|||||||
|
|
||||||
# Logstash Section
|
# Logstash Section
|
||||||
|
|
||||||
|
# Only run this is you are in the sensor role
|
||||||
|
{% if grains['role'] == 'so-sensor' %}
|
||||||
|
|
||||||
# Add Logstash user
|
# Add Logstash user
|
||||||
logstash:
|
logstash:
|
||||||
user.present:
|
user.present:
|
||||||
@@ -22,34 +25,49 @@ logstash:
|
|||||||
- gid: 931
|
- gid: 931
|
||||||
- home: /opt/so/conf/logstash
|
- home: /opt/so/conf/logstash
|
||||||
|
|
||||||
# Copy all the files needed for logstash
|
# Create logstash conf directory
|
||||||
|
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/conf/logstash
|
- name: /opt/so/conf/logstash
|
||||||
- user: 931
|
- user: 931
|
||||||
- group: 939
|
- group: 939
|
||||||
|
- makedirs: True
|
||||||
|
|
||||||
|
# Set the heap size from the sensor pillar
|
||||||
|
{% set lsheap = salt['pillar.get'](sensor:lsheap) %}
|
||||||
|
|
||||||
|
{% else %}
|
||||||
|
|
||||||
|
# Set the heap size from the master pillar
|
||||||
|
{% set lsheap = salt['pillar.get'](master:lsheap) %}
|
||||||
|
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
# Create the conf/d logstash directory
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/conf/logstash/conf.d
|
- name: /opt/so/conf/logstash/conf.d
|
||||||
- user: 931
|
- user: 931
|
||||||
- group: 939
|
- group: 939
|
||||||
|
|
||||||
|
# Copy down all the configs
|
||||||
file.recurse:
|
file.recurse:
|
||||||
- name: /opt/so/conf/logstash
|
- name: /opt/so/conf/logstash
|
||||||
- source: salt://sensor/files/logstash
|
- source: salt://sensor/files/logstash
|
||||||
- user: 931
|
- user: 931
|
||||||
- group: 939
|
- group: 939
|
||||||
|
|
||||||
|
# Create the import directory
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /nsm/import
|
- name: /nsm/import
|
||||||
- user: 931
|
- user: 931
|
||||||
- group: 939
|
- group: 939
|
||||||
|
|
||||||
|
# Create the logstash data directory
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /nsm/logstash
|
- name: /nsm/logstash
|
||||||
- user: 931
|
- user: 931
|
||||||
- group: 939
|
- group: 939
|
||||||
|
|
||||||
|
# Create the log directory
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/log/logstash
|
- name: /opt/so/log/logstash
|
||||||
- user: 931
|
- user: 931
|
||||||
@@ -64,7 +82,7 @@ so-logstash:
|
|||||||
- hostname: logstash
|
- hostname: logstash
|
||||||
- user: logstash
|
- user: logstash
|
||||||
- environment:
|
- environment:
|
||||||
- LS_JAVA_OPTS="-Xms$LOGSTASH_HEAP -Xmx$LOGSTASH_HEAP"
|
- LS_JAVA_OPTS="-Xms{{ lsheap }} -Xmx{{ lsheap }}"
|
||||||
- ports:
|
- ports:
|
||||||
- 5044
|
- 5044
|
||||||
- 6050
|
- 6050
|
||||||
|
|||||||
Reference in New Issue
Block a user