dont apply suricata.enabled on import nodes

This commit is contained in:
m0duspwnens
2023-05-30 16:10:41 -04:00
parent 25006ed20b
commit 743ed316f8

View File

@@ -3,11 +3,15 @@
# https://securityonion.net/license; you may not use this file except in compliance with the # https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0. # Elastic License 2.0.
{% from 'vars/globals.map.jinja' import GLOBALS %}
{% from 'suricata/map.jinja' import SURICATAMERGED %} {% from 'suricata/map.jinja' import SURICATAMERGED %}
include: include:
{% if SURICATAMERGED.enabled %} {% if SURICATAMERGED.enabled and GLOBALS.role != 'so-import' %}
- suricata.enabled - suricata.enabled
{% elif GLOBALS.role == 'so-import' %}
- suricata.config
- suricata.disabled
{% else %} {% else %}
- suricata.disabled - suricata.disabled
{% endif %} {% endif %}