CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix defaults for influx

Browse Source
This commit is contained in:
Mike Reeves
2022-12-19 10:46:39 -05:00
parent d9343d8450
commit 56f326d123
1 changed files with 56 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

113
salt/influxdb/defaults.yaml
View File

@@ -1,17 +1,17 @@
influxdb:
config:
meta:
dir: '/var/lib/influxdb/meta'
retention-autocreate: true
logging-enabled: true
dir: '"/var/lib/influxdb/meta"'
retention-autocreate: 'true'
logging-enabled: 'true'
data:
dir: '/var/lib/influxdb/data'
wal-dir: /var/lib/influxdb/wal'
dir: '"/var/lib/influxdb/data"'
wal-dir: '"/var/lib/influxdb/wal"'
wal-fsync-delay: '0s'
index-version: 'inmem'
race-logging-enabled: false
query-log-enabled: true
validate-keys: false
race-logging-enabled: 'false'
query-log-enabled: 'true'
validate-keys: 'false'
cache-max-memory-size: '1g'
cache-snapshot-memory-size: '25m'
cache-snapshot-write-cold-duration: '10m'
@@ -22,7 +22,7 @@ influxdb:
max-index-log-file-size: '1m'
max-series-per-database: 1000000
max-values-per-tag: 100000
tsm-use-madv-willneed: false
tsm-use-madv-willneed: 'false'
coordinator:
write-timeout: '10s'
max-concurrent-queries: 0
@@ -32,37 +32,37 @@ influxdb:
max-select-series: 0
max-select-buckets: 0
retention:
enabled: true
enabled: 'true'
check-interval: '30m'
shard-precreation:
enabled: true
enabled: 'true'
check-interval: '10m'
advance-period: '30m'
monitor:
store-enabled: true
store-enabled: 'true'
store-database: '_internal'
store-interval: '10s'
http:
enabled: true
flux-enabled: true
enabled: 'true'
flux-enabled: 'true'
bind-address: ':8086'
auth-enabled: false
auth-enabled: 'false'
realm: 'InfluxDB'
log-enabled: false
suppress-write-log: false
log-enabled: 'false'
suppress-write-log: 'false'
access-log-path: ''
access-log-status-filters: []
write-tracing: false
pprof-enabled: true
debug-pprof-enabled: false
https-enabled: true
https-certificate: '/etc/ssl/influxdb.crt'
https-private-key: '/etc/ssl/influxdb.key'
access-log-status-filters: '[]''
write-tracing: 'false'
pprof-enabled: 'true'
debug-pprof-enabled: 'false'
https-enabled: 'true'
https-certificate: '"/etc/ssl/influxdb.crt"'
https-private-key: '"/etc/ssl/influxdb.key"'
shared-secret: ''
max-row-limit: 0
max-connection-limit: 0
unix-socket-enabled: false
bind-socket: '/var/run/influxdb.sock'
unix-socket-enabled: 'false'
bind-socket: '"/var/run/influxdb.sock"'
max-body-size: 25000000
max-concurrent-write-limit: 0
max-enqueued-write-limit: 0
@@ -70,16 +70,16 @@ influxdb:
logging:
format: 'auto'
level: 'info'
suppress-logo: false
suppress-logo: 'false'
subscriber:
enabled: true
enabled: 'true'
http-timeout: '30s'
insecure-skip-verify: false
insecure-skip-verify: 'false'
ca-certs: ''
write-concurrency: 40
write-buffer-size: 1000
graphite:
enabled: false
enabled: 'false'
database: 'graphite'
retention-policy: ''
bind-address: ':2003'
@@ -93,13 +93,13 @@ influxdb:
tags: ''
templates: ''
colectd:
enabled: false
enabled: 'false'
bind-address: ':25826'
database: 'collectd'
retention-policy: ''
typesdb: '/usr/local/share/collectd'
typesdb: '"/usr/local/share/collectd"'
security-level: 'none'
auth-file: '/etc/collectd/auth_file'
auth-file: '"/etc/collectd/auth_file"'
batch-size: 5000
bath-pending: 10
read-buffer: 0
@@ -110,14 +110,14 @@ influxdb:
database: 'opentsdb'
retention-policy: ''
consistency-level: 'one'
tls-enabled: false
tls-enabled: 'false'
certificate: '/etc/ssl/influxdb.pem'
log-point-errors: true
log-point-errors: 'true'
batch-size: 1000
batch-pending: 5
bath-timeout: '1s'
udp:
enabled: false
enabled: 'false'
bind-address: ':8089'
database: 'udp'
retention-policy: ''
@@ -127,32 +127,31 @@ influxdb:
batch-timeout: '1s'
read-buffer: 0
continuous_queries:
enabled: true
log-enabled: true
query-stats-enabled: false
enabled: 'true'
log-enabled: 'true'
query-stats-enabled: 'false'
run-interval: '1s'
tls:
ciphers:
- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_RSA_WITH_AES_128_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA256
- TLS_RSA_WITH_AES_128_GCM_SHA256
- TLS_RSA_WITH_AES_256_CBC_SHA
- TLS_RSA_WITH_AES_256_GCM_SHA384
- '"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"'
- '"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"'
- '"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"'
- '"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"'
- '"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"'
- '"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305"'
- '"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"'
- '"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"'
- '"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"'
- '"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"'
- '"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"'
- '"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"'
- '"TLS_RSA_WITH_AES_128_CBC_SHA"'
- '"TLS_RSA_WITH_AES_128_CBC_SHA256"'
- '"TLS_RSA_WITH_AES_128_GCM_SHA256"'
- '"TLS_RSA_WITH_AES_256_CBC_SHA"'
- '"TLS_RSA_WITH_AES_256_GCM_SHA384"'
min-version: 'tls1.2'
max-version: 'tls1.2'
retention_policies:
so_short_term:
default: True