evalmode fix

This commit is contained in:
m0duspwnens
2020-01-30 17:54:24 -05:00
parent 68e7dcfba0
commit 6b580eaba9

View File

@@ -239,7 +239,7 @@ so-logstash:
- /etc/pki/filebeat.p8:/usr/share/logstash/filebeat.key:ro
- /etc/pki/ca.crt:/usr/share/filebeat/ca.crt:ro
{%- if grains['role'] == 'so-eval' %}
- /nsm/bro:/nsm/bro:ro
- /nsm/zeek:/nsm/zeek:ro
- /opt/so/log/suricata:/suricata:ro
- /opt/so/wazuh/logs/alerts/:/wazuh/alerts:ro
- /opt/so/wazuh/logs/archives/:/wazuh/archives:ro