Update filecheck.yaml

This commit is contained in:
Mike Reeves
2022-10-31 13:45:00 -04:00
committed by GitHub
parent e93e2995b7
commit 518d2aaa9c

View File

@@ -1,11 +1,11 @@
{%- set ENGINE = salt['pillar.get']('global:mdengine', '') -%} {%- set ENGINE = salt['pillar.get']('global:mdengine', '') %}
filecheck: filecheck:
{%- if ENGINE == "SURICATA" -%} {%- if ENGINE == "SURICATA" %}
extract_path = '/nsm/suricata/extracted' extract_path: '/nsm/suricata/extracted'
{%- else -%} {%- else %}
extract_path = '/nsm/zeek/extracted/complete' extract_path: '/nsm/zeek/extracted/complete'
{%- endif -%} {%- endif %}
historypath = '/nsm/strelka/history/' historypath: '/nsm/strelka/history/'
strelkapath = '/nsm/strelka/unprocessed/' strelkapath: '/nsm/strelka/unprocessed/'
logfile = '/opt/so/log/strelka/filecheck.log' logfile: '/opt/so/log/strelka/filecheck.log'