From df590bfd23fa20a5528a62603a028baa5fa2f615 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Wed, 13 Jan 2021 11:09:38 -0500
Subject: [PATCH] pillarize disk freespace for steno
 https://github.com/Security-Onion-Solutions/securityonion/issues/2095

---
 salt/pcap/files/config | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/salt/pcap/files/config b/salt/pcap/files/config
index 4a612fbf1..048775ef7 100644
--- a/salt/pcap/files/config
+++ b/salt/pcap/files/config
@@ -1,10 +1,12 @@
 {%- set interface = salt['pillar.get']('sensor:interface', 'bond0') %}
+{%- set diskfreepercentage = salt['pillar.get']('steno:diskfreepercentage', 10) %}
+
 {
   "Threads": [
     { "PacketsDirectory": "/nsm/pcap"
     , "IndexDirectory": "/nsm/pcapindex"
     , "MaxDirectoryFiles": 30000
-    , "DiskFreePercentage": 10
+    , "DiskFreePercentage": {{ diskfreepercentage }}
     }
   ]
   , "StenotypePath": "/usr/bin/stenotype"
@@ -13,4 +15,4 @@
   , "Host": "127.0.0.1"
   , "Flags": ["-v", "--uid=stenographer", "--gid=stenographer"{{ BPF_COMPILED }}]
   , "CertPath": "/etc/stenographer/certs"
-}
+}
\ No newline at end of file