CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix elastic output for ssl

Browse Source
This commit is contained in:
Mike Reeves
2021-03-03 14:30:45 -05:00
parent bf4249d28b
commit 49371a1d6a
12 changed files with 4 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/kibana/etc/kibana.yml
View File

@@ -14,3 +14,7 @@ elasticsearch.requestTimeout: 90000
logging.dest: /var/log/kibana/kibana.log logging.dest: /var/log/kibana/kibana.log
telemetry.enabled: false telemetry.enabled: false
security.showInsecureClusterWarning: false security.showInsecureClusterWarning: false
xpack.security.authc.providers:
anonymous.anonymous1:
order: 0
credentials: "elasticsearch_anonymous_user"

2
salt/logstash/pipelines/config/so/9000_output_zeek.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-zeek" template_name => "so-zeek"
template => "/templates/so-zeek-template.json" template => "/templates/so-zeek-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9002_output_import.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-import" template_name => "so-import"
template => "/templates/so-import-template.json" template => "/templates/so-import-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9004_output_flow.conf.jinja
View File

@@ -11,10 +11,8 @@ output {
template_name => "so-flow" template_name => "so-flow"
template => "/templates/so-flow-template.json" template => "/templates/so-flow-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9033_output_snort.conf.jinja
View File

@@ -11,10 +11,8 @@ output {
template_name => "so-ids" template_name => "so-ids"
template => "/templates/so-ids-template.json" template => "/templates/so-ids-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9034_output_syslog.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-syslog" template_name => "so-syslog"
template => "/templates/so-syslog-template.json" template => "/templates/so-syslog-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9100_output_osquery.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-osquery" template_name => "so-osquery"
template => "/templates/so-osquery-template.json" template => "/templates/so-osquery-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9200_output_firewall.conf.jinja
View File

@@ -11,10 +11,8 @@ output {
template_name => "so-firewall" template_name => "so-firewall"
template => "/templates/so-firewall-template.json" template => "/templates/so-firewall-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9400_output_suricata.conf.jinja
View File

@@ -11,10 +11,8 @@ output {
index => "so-ids" index => "so-ids"
template_name => "so-ids" template_name => "so-ids"
template => "/templates/so-ids-template.json" template => "/templates/so-ids-template.json"
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9500_output_beats.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-beats" template_name => "so-beats"
template => "/templates/so-beats-template.json" template => "/templates/so-beats-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-ossec" template_name => "so-ossec"
template => "/templates/so-ossec-template.json" template => "/templates/so-ossec-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }

2
salt/logstash/pipelines/config/so/9700_output_strelka.conf.jinja
View File

@@ -12,10 +12,8 @@ output {
template_name => "so-strelka" template_name => "so-strelka"
template => "/templates/so-strelka-template.json" template => "/templates/so-strelka-template.json"
template_overwrite => true template_overwrite => true
{%- if grains['role'] in ['so-node','so-heavynode'] %}
ssl => true ssl => true
ssl_certificate_verification => false ssl_certificate_verification => false
{%- endif %}
} }
} }
} }