From 41db668af66136f84f8e625e5da5abd435531965 Mon Sep 17 00:00:00 2001 From: Wes Lambert Date: Tue, 11 Feb 2020 22:16:25 +0000 Subject: [PATCH] update Wazuh data paths --- salt/filebeat/init.sls | 4 ++-- salt/logstash/init.sls | 4 ++-- salt/wazuh/init.sls | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/salt/filebeat/init.sls b/salt/filebeat/init.sls index ea7a84150..671530cd1 100644 --- a/salt/filebeat/init.sls +++ b/salt/filebeat/init.sls @@ -57,8 +57,8 @@ so-filebeat: - /opt/so/conf/filebeat/etc/filebeat.yml:/usr/share/filebeat/filebeat.yml:ro - /nsm/zeek:/nsm/zeek:ro - /opt/so/log/suricata:/suricata:ro - - /opt/so/conf/wazuh/logs/alerts:/wazuh/alerts:ro - - /opt/so/conf/wazuh/logs/archives:/wazuh/archives:ro + - /opt/so/wazuh/logs/alerts:/wazuh/alerts:ro + - /opt/so/wazuh/logs/archives:/wazuh/archives:ro - /opt/so/log/fleet/:/osquery/logs:ro - /opt/so/conf/filebeat/etc/pki/filebeat.crt:/usr/share/filebeat/filebeat.crt:ro - /opt/so/conf/filebeat/etc/pki/filebeat.key:/usr/share/filebeat/filebeat.key:ro diff --git a/salt/logstash/init.sls b/salt/logstash/init.sls index 0d475101d..222d6c586 100644 --- a/salt/logstash/init.sls +++ b/salt/logstash/init.sls @@ -241,8 +241,8 @@ so-logstash: {%- if grains['role'] == 'so-eval' %} - /nsm/zeek:/nsm/zeek:ro - /opt/so/log/suricata:/suricata:ro - - /opt/so/conf/wazuh/logs/alerts:/wazuh/alerts:ro - - /opt/so/conf/wazuh/logs/archives:/wazuh/archives:ro + - /opt/so/wazuh/logs/alerts:/wazuh/alerts:ro + - /opt/so/wazuh/logs/archives:/wazuh/archives:ro - /opt/so/log/fleet/:/osquery/logs:ro - /opt/so/log/strelka:/strelka:ro {%- endif %} diff --git a/salt/wazuh/init.sls b/salt/wazuh/init.sls index b8600503a..4a6526c13 100644 --- a/salt/wazuh/init.sls +++ b/salt/wazuh/init.sls @@ -90,7 +90,7 @@ so-wazuh: - 0.0.0.0:1514:1514/tcp - 0.0.0.0:55000:55000 - binds: - - /opt/so/conf/wazuh:/var/ossec/data:rw + - /opt/so/wazuh:/var/ossec/data:rw # Register the agent registertheagent: