CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

define ZEEKLOGLOOKUP in the yaml

Browse Source
This commit is contained in:
m0duspwnens
2021-05-25 17:18:58 -04:00
parent ecf7e25a51
commit 525d4325c7
2 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/filebeat/map.jinja
View File

@@ -4,7 +4,3 @@
{% import_yaml 'filebeat/securityoniondefaults.yaml' as SODEFAULTS %} {% import_yaml 'filebeat/securityoniondefaults.yaml' as SODEFAULTS %}
{% set SO = SODEFAULTS.securityonion_filebeat %} {% set SO = SODEFAULTS.securityonion_filebeat %}
{#% set SO = salt['pillar.get']('filebeat:third_party_filebeat', default=SODEFAULTS.third_party_filebeat, merge=True) %#} {#% set SO = salt['pillar.get']('filebeat:third_party_filebeat', default=SODEFAULTS.third_party_filebeat, merge=True) %#}
{% set ZEEKLOGLOOKUP = {
'conn': 'connection',
} %}

4
salt/filebeat/securityoniondefaults.yaml
View File

@@ -1,5 +1,7 @@
{%- set ZEEKVER = salt['pillar.get']('global:mdengine', '') %} {%- set ZEEKVER = salt['pillar.get']('global:mdengine', '') %}
{% from 'filebeat/map.jinja' import ZEEKLOGLOOKUP with context %} {% set ZEEKLOGLOOKUP = {
'conn': 'connection',
} %}
securityonion_filebeat: securityonion_filebeat:
modules: modules: