CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-09 18:52:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #15028 from Security-Onion-Solutions/reyesj2/ea-alerter

Browse Source 
agent monitor template & dataset name update
This commit is contained in:
Jorge Reyes
2025-09-12 14:45:20 -05:00
committed by GitHub
parent bb984e05e3 0606c0a454
commit 4d24c57903
2 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/elasticfleet/files/integrations/grid-nodes_general/elastic-agent-monitor.json
View File

@@ -21,7 +21,7 @@
"paths": [ "paths": [
"/opt/so/log/agents/agent-monitor.log" "/opt/so/log/agents/agent-monitor.log"
], ],
"data_stream.dataset": "agent-monitor", "data_stream.dataset": "agentmonitor",
"pipeline": "elasticagent.monitor", "pipeline": "elasticagent.monitor",
"parsers": "", "parsers": "",
"exclude_files": [ "exclude_files": [

8
salt/elasticsearch/defaults.yaml
View File

@@ -1323,7 +1323,7 @@ elasticsearch:
set_priority: set_priority:
priority: 50 priority: 50
min_age: 30d min_age: 30d
so-logs-agent-monitor: so-elastic-agent-monitor:
index_sorting: false index_sorting: false
index_template: index_template:
composed_of: composed_of:
@@ -1335,10 +1335,8 @@ elasticsearch:
data_stream: data_stream:
allow_custom_routing: false allow_custom_routing: false
hidden: false hidden: false
ignore_missing_component_templates:
- logs-agent-monitor@custom
index_patterns: index_patterns:
- logs-agent-monitor-* - logs-agentmonitor-*
priority: 501 priority: 501
template: template:
mappings: mappings:
@@ -1350,7 +1348,7 @@ elasticsearch:
settings: settings:
index: index:
lifecycle: lifecycle:
name: so-logs-agent-monitor-logs name: so-elastic-agent-monitor-logs
mapping: mapping:
total_fields: total_fields:
limit: 5000 limit: 5000