Merge pull request #10465 from Security-Onion-Solutions/suricataimport

dont apply suricata.enabled on import nodes
This commit is contained in:
Josh Patterson
2023-05-30 16:51:17 -04:00
committed by GitHub

View File

@@ -3,11 +3,15 @@
# https://securityonion.net/license; you may not use this file except in compliance with the # https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0. # Elastic License 2.0.
{% from 'vars/globals.map.jinja' import GLOBALS %}
{% from 'suricata/map.jinja' import SURICATAMERGED %} {% from 'suricata/map.jinja' import SURICATAMERGED %}
include: include:
{% if SURICATAMERGED.enabled %} {% if SURICATAMERGED.enabled and GLOBALS.role != 'so-import' %}
- suricata.enabled - suricata.enabled
{% elif GLOBALS.role == 'so-import' %}
- suricata.config
- suricata.disabled
{% else %} {% else %}
- suricata.disabled - suricata.disabled
{% endif %} {% endif %}