Merge pull request #11919 from Security-Onion-Solutions/fix/remove_curator_changes

Remove Curator Changes
This commit is contained in:
weslambert
2023-12-01 11:15:23 -05:00
committed by GitHub
43 changed files with 8 additions and 49 deletions

View File

@@ -15,7 +15,6 @@ actions:
description: >-
Delete indices when {{log_size_limit}}(GB) is exceeded.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close import indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete import indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Strelka indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete Strelka indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Suricata indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete Suricata indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close syslog indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete syslog indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Zeek indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete Zeek indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Beats indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete beats indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close elasticsearch indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete elasticsearch indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -11,7 +11,6 @@ actions:
description: >-
Close Firewall indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -11,7 +11,6 @@ actions:
description: >-
Delete firewall indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -11,7 +11,6 @@ actions:
description: >-
Close IDS indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -11,7 +11,6 @@ actions:
description: >-
Delete IDS indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Import indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete import indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close kibana indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete kibana indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close kratos indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete kratos indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close logstash indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete logstash indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close netflow indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete netflow indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close osquery indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete import indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close ossec indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete ossec indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close redis indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete redis indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Strelka indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete Strelka indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close syslog indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete syslog indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Close Zeek indices older than {{cur_close_days}} days.
options:
allow_ilm_indices: True
delete_aliases: False
timeout_override:
ignore_empty_list: True

View File

@@ -10,7 +10,6 @@ actions:
description: >-
Delete Zeek indices when older than {{ DELETE_DAYS }} days.
options:
allow_ilm_indices: True
ignore_empty_list: True
disable_action: False
filters:

View File

@@ -26,7 +26,7 @@ docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/cur
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/so-strelka-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/so-syslog-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-import-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-strelka-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-suricata-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-syslog-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-zeek-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-strelka-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-suricata-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-syslog-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-zeek-close.yml > /dev/null 2>&1;

View File

@@ -24,7 +24,7 @@ docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/cur
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/so-strelka-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/so-syslog-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-import-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-strelka-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-suricata-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-syslog-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-zeek-so-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-strelka-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-suricata-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-syslog-close.yml > /dev/null 2>&1;
docker exec so-curator curator --config /etc/curator/config/curator.yml /etc/curator/action/logs-zeek-close.yml > /dev/null 2>&1;