mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 01:32:47 +01:00
Remove policy for OSQuery manager indices
This commit is contained in:
@@ -6323,33 +6323,7 @@ elasticsearch:
|
|||||||
template:
|
template:
|
||||||
settings:
|
settings:
|
||||||
index:
|
index:
|
||||||
lifecycle:
|
|
||||||
name: so-logs-osquery-manager-action.responses-logs
|
|
||||||
number_of_replicas: 0
|
number_of_replicas: 0
|
||||||
policy:
|
|
||||||
phases:
|
|
||||||
cold:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 0
|
|
||||||
min_age: 30d
|
|
||||||
delete:
|
|
||||||
actions:
|
|
||||||
delete: {}
|
|
||||||
min_age: 365d
|
|
||||||
hot:
|
|
||||||
actions:
|
|
||||||
rollover:
|
|
||||||
max_age: 30d
|
|
||||||
max_primary_shard_size: 50gb
|
|
||||||
set_priority:
|
|
||||||
priority: 100
|
|
||||||
min_age: 0ms
|
|
||||||
warm:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 50
|
|
||||||
min_age: 30d
|
|
||||||
so-logs-osquery-manager-actions:
|
so-logs-osquery-manager-actions:
|
||||||
index_sorting: false
|
index_sorting: false
|
||||||
index_template:
|
index_template:
|
||||||
@@ -6366,33 +6340,7 @@ elasticsearch:
|
|||||||
template:
|
template:
|
||||||
settings:
|
settings:
|
||||||
index:
|
index:
|
||||||
lifecycle:
|
|
||||||
name: so-logs-osquery-manager-actions-logs
|
|
||||||
number_of_replicas: 0
|
number_of_replicas: 0
|
||||||
policy:
|
|
||||||
phases:
|
|
||||||
cold:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 0
|
|
||||||
min_age: 30d
|
|
||||||
delete:
|
|
||||||
actions:
|
|
||||||
delete: {}
|
|
||||||
min_age: 365d
|
|
||||||
hot:
|
|
||||||
actions:
|
|
||||||
rollover:
|
|
||||||
max_age: 30d
|
|
||||||
max_primary_shard_size: 50gb
|
|
||||||
set_priority:
|
|
||||||
priority: 100
|
|
||||||
min_age: 0ms
|
|
||||||
warm:
|
|
||||||
actions:
|
|
||||||
set_priority:
|
|
||||||
priority: 50
|
|
||||||
min_age: 30d
|
|
||||||
so-logs-panw_x_panos:
|
so-logs-panw_x_panos:
|
||||||
index_sorting: false
|
index_sorting: false
|
||||||
index_template:
|
index_template:
|
||||||
|
|||||||
Reference in New Issue
Block a user