mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Only enable curator on Manager in true cluster
This commit is contained in:
@@ -1,4 +1,4 @@
|
|||||||
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
|
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-infoblox:warm', 7) -%}
|
||||||
actions:
|
actions:
|
||||||
1:
|
1:
|
||||||
action: allocation
|
action: allocation
|
||||||
@@ -14,7 +14,7 @@ actions:
|
|||||||
filters:
|
filters:
|
||||||
- filtertype: pattern
|
- filtertype: pattern
|
||||||
kind: prefix
|
kind: prefix
|
||||||
value: so-aws
|
value: so-infoblox
|
||||||
- filtertype: age
|
- filtertype: age
|
||||||
source: name
|
source: name
|
||||||
direction: older
|
direction: older
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-ids:close', 30) -%}
|
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-kibana:close', 30) -%}
|
||||||
---
|
---
|
||||||
# Remember, leave a key empty if there is no value. None will be a string,
|
# Remember, leave a key empty if there is no value. None will be a string,
|
||||||
# not a Python "NoneType"
|
# not a Python "NoneType"
|
||||||
@@ -10,7 +10,7 @@ actions:
|
|||||||
1:
|
1:
|
||||||
action: close
|
action: close
|
||||||
description: >-
|
description: >-
|
||||||
Close IDS indices older than {{cur_close_days}} days.
|
Close kibana indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
@@ -19,7 +19,7 @@ actions:
|
|||||||
filters:
|
filters:
|
||||||
- filtertype: pattern
|
- filtertype: pattern
|
||||||
kind: regex
|
kind: regex
|
||||||
value: '^(logstash-ids.*|so-ids.*)$'
|
value: '^(logstash-kibana.*|so-kibana.*)$'
|
||||||
- filtertype: age
|
- filtertype: age
|
||||||
source: name
|
source: name
|
||||||
direction: older
|
direction: older
|
||||||
|
|||||||
@@ -207,7 +207,7 @@ so-curatorclusterclose:
|
|||||||
|
|
||||||
so-curatorclusterdelete:
|
so-curatorclusterdelete:
|
||||||
cron.present:
|
cron.present:
|
||||||
- name: /usr/sbin/so-curator-cluster-delete > /opt/so/log/curator/cron-close.log 2>&1
|
- name: /usr/sbin/so-curator-cluster-delete > /opt/so/log/curator/cron-delete.log 2>&1
|
||||||
- user: root
|
- user: root
|
||||||
- minute: '2'
|
- minute: '2'
|
||||||
- hour: '*/1'
|
- hour: '*/1'
|
||||||
@@ -217,7 +217,7 @@ so-curatorclusterdelete:
|
|||||||
{% if HOTWARM is sameas true %}
|
{% if HOTWARM is sameas true %}
|
||||||
so-curatorclusterwarm:
|
so-curatorclusterwarm:
|
||||||
cron.present:
|
cron.present:
|
||||||
- name: /usr/sbin/so-curator-cluster-warm > /opt/so/log/curator/cron-close.log 2>&1
|
- name: /usr/sbin/so-curator-cluster-warm > /opt/so/log/curator/cron-warm.log 2>&1
|
||||||
- user: root
|
- user: root
|
||||||
- minute: '2'
|
- minute: '2'
|
||||||
- hour: '*/1'
|
- hour: '*/1'
|
||||||
|
|||||||
Reference in New Issue
Block a user