final logstash tweaks

salt/logstash/init.sls

@@ -167,7 +167,7 @@ so-logstash:
       - /etc/pki/filebeat.crt:/usr/share/logstash/filebeat.crt:ro
       - /etc/pki/filebeat.p8:/usr/share/logstash/filebeat.key:ro
       - /etc/pki/ca.crt:/usr/share/filebeat/ca.crt:ro
-      - /etc/pki/ca.crt:/etc/ssl/certs/ca.crt:ro
+      - /etc/ssl/certs/intca.crt:/etc/ssl/certs/ca.crt:ro
       {%- if grains['role'] == 'so-eval' %}
       - /nsm/zeek:/nsm/zeek:ro
       - /nsm/suricata:/suricata:ro

salt/logstash/pipelines/config/so/0899_input_minio.conf.jinja

@@ -13,7 +13,7 @@ input {
         endpoint => "https://{{ MANAGER }}:9595"
         bucket => "logstash"
         delete => true
-        interval => 10
+        interval => 5
         codec => json
         additional_settings => {
             "force_path_style" => true