mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 01:32:47 +01:00
integration policy update
This commit is contained in:
@@ -534,14 +534,16 @@ post_to_2.4.120() {
|
|||||||
# Manually rollover suricata alerts index to ensure data_stream.dataset expected mapping is set to 'suricata'
|
# Manually rollover suricata alerts index to ensure data_stream.dataset expected mapping is set to 'suricata'
|
||||||
rollover_index "logs-suricata.alerts-so"
|
rollover_index "logs-suricata.alerts-so"
|
||||||
|
|
||||||
# Sync the newly generated index templates for elasticfleet integrations
|
|
||||||
salt-call state.apply elasticsearch queue=True
|
|
||||||
|
|
||||||
POSTVERSION=2.4.120
|
POSTVERSION=2.4.120
|
||||||
}
|
}
|
||||||
|
|
||||||
post_to_2.4.130() {
|
post_to_2.4.130() {
|
||||||
echo "Nothing to apply"
|
# Integrations policies need to be updated
|
||||||
|
rm -f /opt/so/state/eaintegrations.txt
|
||||||
|
|
||||||
|
# Sync the newly generated index templates for elasticfleet integrations
|
||||||
|
salt-call state.apply elasticsearch queue=True
|
||||||
|
|
||||||
POSTVERSION=2.4.130
|
POSTVERSION=2.4.130
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user