mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
only include global phases if defined in default for that index
This commit is contained in:
@@ -201,28 +201,11 @@ elasticsearch:
|
|||||||
order: desc
|
order: desc
|
||||||
policy:
|
policy:
|
||||||
phases:
|
phases:
|
||||||
cold:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 0
|
|
||||||
min_age: 60d
|
|
||||||
delete:
|
|
||||||
actions:
|
|
||||||
delete: {}
|
|
||||||
min_age: 365d
|
|
||||||
hot:
|
hot:
|
||||||
actions:
|
actions:
|
||||||
rollover:
|
rollover:
|
||||||
max_age: 30d
|
max_size: 50gb
|
||||||
max_primary_shard_size: 50gb
|
|
||||||
set_priority:
|
|
||||||
priority: 100
|
|
||||||
min_age: 0ms
|
min_age: 0ms
|
||||||
warm:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 50
|
|
||||||
min_age: 30d
|
|
||||||
so-lists:
|
so-lists:
|
||||||
index_sorting: false
|
index_sorting: false
|
||||||
index_template:
|
index_template:
|
||||||
@@ -254,28 +237,11 @@ elasticsearch:
|
|||||||
order: desc
|
order: desc
|
||||||
policy:
|
policy:
|
||||||
phases:
|
phases:
|
||||||
cold:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 0
|
|
||||||
min_age: 60d
|
|
||||||
delete:
|
|
||||||
actions:
|
|
||||||
delete: {}
|
|
||||||
min_age: 365d
|
|
||||||
hot:
|
hot:
|
||||||
actions:
|
actions:
|
||||||
rollover:
|
rollover:
|
||||||
max_age: 30d
|
max_size: 50gb
|
||||||
max_primary_shard_size: 50gb
|
|
||||||
set_priority:
|
|
||||||
priority: 100
|
|
||||||
min_age: 0ms
|
min_age: 0ms
|
||||||
warm:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 50
|
|
||||||
min_age: 30d
|
|
||||||
so-case:
|
so-case:
|
||||||
index_sorting: false
|
index_sorting: false
|
||||||
index_template:
|
index_template:
|
||||||
|
|||||||
@@ -22,14 +22,26 @@
|
|||||||
{% set ES_INDEX_SETTINGS = {} %}
|
{% set ES_INDEX_SETTINGS = {} %}
|
||||||
{% do ES_INDEX_SETTINGS_GLOBAL_OVERRIDES.update(salt['defaults.merge'](ES_INDEX_SETTINGS_GLOBAL_OVERRIDES, ES_INDEX_PILLAR, in_place=False)) %}
|
{% do ES_INDEX_SETTINGS_GLOBAL_OVERRIDES.update(salt['defaults.merge'](ES_INDEX_SETTINGS_GLOBAL_OVERRIDES, ES_INDEX_PILLAR, in_place=False)) %}
|
||||||
{% for index, settings in ES_INDEX_SETTINGS_GLOBAL_OVERRIDES.items() %}
|
{% for index, settings in ES_INDEX_SETTINGS_GLOBAL_OVERRIDES.items() %}
|
||||||
|
|
||||||
{# prevent this action from being performed on custom defined indices. #}
|
{# prevent this action from being performed on custom defined indices. #}
|
||||||
{# the custom defined index is not present in either of the dictionaries and fails to reder. #}
|
{# the custom defined index is not present in either of the dictionaries and fails to reder. #}
|
||||||
{% if index in ES_INDEX_SETTINGS_ORIG and index in ES_INDEX_SETTINGS_GLOBAL_OVERRIDES %}
|
{% if index in ES_INDEX_SETTINGS_ORIG and index in ES_INDEX_SETTINGS_GLOBAL_OVERRIDES %}
|
||||||
|
|
||||||
{# dont merge policy from the global_overrides if policy isn't defined in the original index settingss #}
|
{# dont merge policy from the global_overrides if policy isn't defined in the original index settingss #}
|
||||||
{# this will prevent so-elasticsearch-ilm-policy-load from trying to load policy on non ILM manged indices #}
|
{# this will prevent so-elasticsearch-ilm-policy-load from trying to load policy on non ILM manged indices #}
|
||||||
{% if not ES_INDEX_SETTINGS_ORIG[index].policy is defined and ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].policy is defined %}
|
{% if not ES_INDEX_SETTINGS_ORIG[index].policy is defined and ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].policy is defined %}
|
||||||
{% do ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].pop('policy') %}
|
{% do ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].pop('policy') %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
|
{# this prevents and index from inderiting a policy phase from global overrides if it wasnt defined in the defaults. #}
|
||||||
|
{% if ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].policy is defined %}
|
||||||
|
{% for phase in ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].policy.phases.copy() %}
|
||||||
|
{% if ES_INDEX_SETTINGS_ORIG[index].policy.phases[phase] is not defined %}
|
||||||
|
{% do ES_INDEX_SETTINGS_GLOBAL_OVERRIDES[index].policy.phases.pop(phase) %}
|
||||||
|
{% endif %}
|
||||||
|
{% endfor %}
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|
||||||
{% if settings.index_template is defined %}
|
{% if settings.index_template is defined %}
|
||||||
|
|||||||
Reference in New Issue
Block a user