CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-18 06:52:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

Backup Suricata for migration and remove advanced from reverselookups

Browse Source
This commit is contained in:
Mike Reeves
2024-05-13 09:50:14 -04:00
parent a4f2d8f327
commit 641899ad56
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
salt/manager/tools/sbin/soup
View File

@@ -583,6 +583,7 @@ up_to_2.4.60() {
up_to_2.4.70() { up_to_2.4.70() {
playbook_migration playbook_migration
suricata_idstools_migration
toggle_telemetry toggle_telemetry
add_detection_test_pillars add_detection_test_pillars
INSTALLEDVERSION=2.4.70 INSTALLEDVERSION=2.4.70
@@ -634,6 +635,16 @@ ASSIST_EOF
fi fi
} }
suricata_idstools_migration() {
#Backup the pillars for idstools
mkdir -p /nsm/backup/detections-migration/idstools
rsync -av /opt/so/saltstack/local/pillar/idstools /nsm/backup/detections-migration/idstools
#Backup Thresholds
mkdir -p /nsm/backup/detections-migration/suricata
rsync -av /opt/so/saltstack/local/salt/suricata/thresholding /nsm/backup/detections-migration/suricata
}
playbook_migration() { playbook_migration() {
# Start SOC Detections migration # Start SOC Detections migration
mkdir -p /nsm/backup/detections-migration/{suricata,sigma/rules,elastalert} mkdir -p /nsm/backup/detections-migration/{suricata,sigma/rules,elastalert}

2
salt/soc/soc_soc.yaml
View File

@@ -235,7 +235,7 @@ soc:
apiTimeoutMs: apiTimeoutMs:
description: Duration (in milliseconds) to wait for a response from the SOC server API before giving up and showing an error on the SOC UI. description: Duration (in milliseconds) to wait for a response from the SOC server API before giving up and showing an error on the SOC UI.
global: True global: True
advanced: True advanced: False
forcedType: int forcedType: int
webSocketTimeoutMs: webSocketTimeoutMs:
description: Duration (in milliseconds) to wait for a response from the SOC server websocket before giving up and reconnecting. description: Duration (in milliseconds) to wait for a response from the SOC server websocket before giving up and reconnecting.