CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #11219 from Security-Onion-Solutions/fix/elastic_fortigate

Browse Source 
Correct Fortigate Integration
This commit is contained in:
weslambert
2023-08-30 15:54:39 -04:00
committed by GitHub
parent 257a471383 d090852895
commit 4127e0fc53
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
salt/elasticfleet/defaults.yaml
View File

@@ -41,6 +41,7 @@ elasticfleet:
- fleet_server - fleet_server
- fim - fim
- fortinet - fortinet
- fortinet_fortigate
- gcp - gcp
- github - github
- google_workspace - google_workspace

8
salt/elasticsearch/defaults.yaml
View File

@@ -970,18 +970,18 @@ elasticsearch:
data_stream: data_stream:
hidden: false hidden: false
allow_custom_routing: false allow_custom_routing: false
so-logs-fortinet_x_fortigate: so-logs-fortinet_fortigate_x_log:
index_sorting: False index_sorting: False
index_template: index_template:
index_patterns: index_patterns:
- "logs-fortinet.fortigate-*" - "logs-fortinet_fortigate.log-*"
template: template:
settings: settings:
index: index:
number_of_replicas: 0 number_of_replicas: 0
composed_of: composed_of:
- "logs-fortinet.fortigate@package" - "logs-fortinet_fortigate.log@package"
- "logs-fortinet.fortigate@custom" - "logs-fortinet_fortigate.log@custom"
- "so-fleet_globals-1" - "so-fleet_globals-1"
- "so-fleet_agent_id_verification-1" - "so-fleet_agent_id_verification-1"
priority: 501 priority: 501