CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-09 10:42:54 +01:00
Code Issues Packages Projects Releases Wiki Activity

extra_hosts and redis_input for logstash

Browse Source
This commit is contained in:
m0duspwnens
2021-12-14 18:49:30 -05:00
parent 4da017d61c
commit 55b74abcc5
3 changed files with 27 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
salt/logstash/pipelines/config/so/0900_input_redis.conf.jinja
View File

@@ -1,13 +1,12 @@
{%- if grains.role in ['so-heavynode'] %}
{%- set HOST = salt['grains.get']('host') %}
{%- else %}
{%- set HOST = salt['grains.get']('master') %}
{%- endif %}
{%- set THREADS = salt['pillar.get']('logstash_settings:ls_input_threads', '') %}
{%- set THREADS = salt['pillar.get']('logstash_settings:ls_input_threads', '') %}
{%- set BATCH = salt['pillar.get']('logstash_settings:ls_pipeline_batch_size', 125) %}
{%- from 'logstash/map.jinja' import EXTRA_HOSTS with context %}
{%- for host in EXTRA_HOSTS.keys %}
input {
redis {
host => '{{ HOST }}'
host => '{{ host }}'
port => 9696
ssl => true
data_type => 'list'
@@ -17,3 +16,4 @@ input {
batch_count => {{ BATCH }}
}
}
{%- endfor %}