CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Avoid unecessary Suricata processes in Import Mode

Browse Source
This commit is contained in:
Doug Burks
2023-01-10 16:48:06 -05:00
committed by GitHub
parent 322efa304a
commit 554754421c
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/suricata/map.jinja
View File

@@ -4,12 +4,8 @@
# don't start the docker container if it is an import node or disabled via pillar # don't start the docker container if it is an import node or disabled via pillar
{% if grains.id.split('_')|last == 'import' or ENABLED is sameas false %} {% if grains.id.split('_')|last == 'import' or ENABLED is sameas false %}
{% do SURICATAOPTIONS.update({'start': False}) %} {% do SURICATAOPTIONS.update({'start': False}) %}
{% else %}
{% do SURICATAOPTIONS.update({'start': True}) %}
{% endif %}
{% if ENABLED is sameas false %}
{% do SURICATAOPTIONS.update({'status': 'absent'}) %} {% do SURICATAOPTIONS.update({'status': 'absent'}) %}
{% else %} {% else %}
{% do SURICATAOPTIONS.update({'start': True}) %}
{% do SURICATAOPTIONS.update({'status': 'running'}) %} {% do SURICATAOPTIONS.update({'status': 'running'}) %}
{% endif %} {% endif %}