Common Module - Grafana Dashboards

salt/common/grafana/etc/dashboards/dashboard.yml

@@ -0,0 +1,11 @@
+apiVersion: 1
+
+providers:
+- name: 'Security Onion'
+  orgId: 1
+  folder: ''
+  type: file
+  disableDeletion: false
+  editable: true
+  options:
+    path: /etc/grafana/provisioning/dashboards

salt/common/telegraf/scripts/redis.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+UNPARSED=$(redis-cli llen logstash:unparsed | awk '{print $1}')
+PARSED=$(redis-cli llen logstash:parsed | awk '{print $1}')
+
+echo "redisqueue unparsed=$UNPARSED parsed=$PARSED"

salt/ssl/init.sls

@@ -16,6 +16,20 @@ m2cryptopkgs:
       - python-m2crypto
 {% endif %}
 
+# Create a cert for the talking to influxdb
+/etc/pki/influxdb.crt:
+  x509.certificate_managed:
+    - ca_server: {{ master }}
+    - signing_policy: influxdb
+    - public_key: /etc/pki/influxdb.key
+    - CN: {{ master }}
+    - days_remaining: 3000
+    - backup: True
+    - managed_private_key:
+        name: /etc/pki/influxdb.key
+        bits: 4096
+        backup: True
+
 {% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %}
 
 # Request a cert and drop it where it needs to go to be distributed
@@ -78,20 +92,6 @@ fbcrtlink:
         bits: 4096
         backup: True
 
-# Create a cert for the reverse proxy
-/etc/pki/influxdb.crt:
-  x509.certificate_managed:
-    - ca_server: {{ master }}
-    - signing_policy: influxdb
-    - public_key: /etc/pki/influxdb.key
-    - CN: {{ master }}
-    - days_remaining: 3000
-    - backup: True
-    - managed_private_key:
-        name: /etc/pki/influxdb.key
-        bits: 4096
-        backup: True
-
 {% endif %}
 {% if grains['role'] == 'so-SENSOR' or grains['role'] == 'so-eval' %}