CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

LS salt module - init file cleanup

Browse Source
This commit is contained in:
Mike Reeves
2018-02-13 10:20:15 -05:00
parent 015a968ab2
commit 4775cbb5ec
1 changed files with 5 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
salt/logstash/init.sls
View File

@@ -82,15 +82,11 @@ lslogdir:
- group: 939
- makedirs: True
# Drop the ruleset file so it can be appended if needed.
{% if freq == '0' and dstats == '0' %}
/opt/so/conf/logstash/rulesets:
file.managed:
- contents:
- # Do nto edit this file. Change in salt otherwise changes will be overwritten
- FREQ=0
- DSTATS=0
@@ -98,28 +94,26 @@ removefreq:
- name: /opt/so/conf/logstash/pipeline/*_postprocess_freq_analysis_*.conf
removedstats1:
- name: 8007_postprocess_dns_top1m_tagging.conf
- name: /opt/so/conf/logstash/pipeline/8007_postprocess_dns_top1m_tagging.conf
removedstats2:
- name: 8008_postprocess_dns_whois_age.conf
- name: /opt/so/conf/logstash/pipeline/8008_postprocess_dns_whois_age.conf
{% elif freq == '1' and dstats == '0' %}
/opt/so/conf/logstash/rulesets:
file.managed:
- contents:
- # Do nto edit this file. Change in salt otherwise changes will be overwritten
- FREQ=1
- DSTATS=0
removedstats1:
- name: 8007_postprocess_dns_top1m_tagging.conf
- name: /opt/so/conf/logstash/pipeline/8007_postprocess_dns_top1m_tagging.conf
removedstats2:
- name: 8008_postprocess_dns_whois_age.conf
- name: /opt/so/conf/logstash/pipeline/8008_postprocess_dns_whois_age.conf
{% elif freq == '1' and dstats == '1' %}
/opt/so/conf/logstash/rulesets:
file.managed:
- contents:
- # Do nto edit this file. Change in salt otherwise changes will be overwritten
- FREQ=1
- DSTATS=1
@@ -127,7 +121,6 @@ removedstats2:
/opt/so/conf/logstash/rulesets:
file.managed:
- contents:
- # Do nto edit this file. Change in salt otherwise changes will be overwritten
- FREQ=0
- DSTATS=1
@@ -142,6 +135,7 @@ so-logstash:
docker_container.running:
- image: toosmooth/so-logstash:test2
- hostname: logstash
- name: logstash
- user: logstash
- environment:
- LS_JAVA_OPTS=-Xms{{ lsheap }} -Xmx{{ lsheap }}