mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Merge remote-tracking branch 'remotes/origin/dev' into automation/ssh_prompts
This commit is contained in:
@@ -1,2 +1,2 @@
|
||||
#!/bin/bash
|
||||
logrotate -f /opt/so/conf/log-rotate.conf >/dev/null 2>&1
|
||||
/usr/sbin/logrotate -f /opt/so/conf/log-rotate.conf > /dev/null 2>&1
|
||||
|
||||
@@ -14,10 +14,9 @@
|
||||
/opt/so/log/suricata/*.log
|
||||
/opt/so/log/mysql/*.log
|
||||
/opt/so/log/playbook/*.log
|
||||
/opt/so/log/logstash/*.log
|
||||
/opt/so/log/filebeat/*.log
|
||||
/opt/so/log/telegraf/*.log
|
||||
/opt/so/log/redis/*.log
|
||||
/opt/so/log/sensoroni/*.log
|
||||
/opt/so/log/stenographer/*.log
|
||||
/opt/so/log/salt/so-salt-minion-check
|
||||
/opt/so/log/salt/minion
|
||||
|
||||
@@ -17,7 +17,7 @@ influxconfdir:
|
||||
influxlogdir:
|
||||
file.directory:
|
||||
- name: /opt/so/log/influxdb
|
||||
- dir_mode: 775
|
||||
- dir_mode: 755
|
||||
- user: 939
|
||||
- group: 939
|
||||
- makedirs: True
|
||||
|
||||
@@ -60,7 +60,7 @@ query_updatepluginurls:
|
||||
playbooklogdir:
|
||||
file.directory:
|
||||
- name: /opt/so/log/playbook
|
||||
- dir_mode: 775
|
||||
- dir_mode: 755
|
||||
- user: 939
|
||||
- group: 939
|
||||
- makedirs: True
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Gzip the eve logs
|
||||
/usr/sbin/logrotate -f /opt/so/conf/suricata/suri-rotate.conf > /dev/null 2>&1
|
||||
@@ -1,12 +0,0 @@
|
||||
/opt/so/log/suricata/stats.log
|
||||
{
|
||||
daily
|
||||
rotate 2
|
||||
missingok
|
||||
nocompress
|
||||
create
|
||||
sharedscripts
|
||||
postrotate
|
||||
docker exec -d so-suricata bash -c 'kill -HUP $(cat /var/run/suricata.pid)'
|
||||
endscript
|
||||
}
|
||||
@@ -81,12 +81,6 @@ surilogscript:
|
||||
- source: salt://suricata/cron/surilogcompress
|
||||
- mode: 755
|
||||
|
||||
surirotatescript:
|
||||
file.managed:
|
||||
- name: /usr/local/bin/surirotate
|
||||
- source: salt://suricata/cron/surirotate
|
||||
- mode: 755
|
||||
|
||||
/usr/local/bin/surilogcompress:
|
||||
cron.present:
|
||||
- user: suricata
|
||||
@@ -174,14 +168,8 @@ disable_so-suricata_so-status.conf:
|
||||
- regex: ^so-suricata$
|
||||
{% endif %}
|
||||
|
||||
surilogrotate:
|
||||
file.managed:
|
||||
- name: /opt/so/conf/suricata/suri-rotate.conf
|
||||
- source: salt://suricata/files/suri-rotate.conf
|
||||
- mode: 644
|
||||
|
||||
/usr/local/bin/surirotate:
|
||||
cron.present:
|
||||
cron.absent:
|
||||
- user: root
|
||||
- minute: '11'
|
||||
- hour: '*'
|
||||
|
||||
@@ -736,7 +736,7 @@ check_requirements() {
|
||||
|
||||
check_sos_appliance() {
|
||||
# Lets see if this is a SOS Appliance
|
||||
if [ -f "/etc/SOSMODEL"]; then
|
||||
if [ -f "/etc/SOSMODEL" ]; then
|
||||
local MODEL=$(cat /etc/SOSMODEL)
|
||||
echo "Found SOS Model $MODEL"
|
||||
echo "sosmodel: $MODEL" >> /etc/salt/grains
|
||||
|
||||
Reference in New Issue
Block a user