seperate securitySolutions load

salt/kibana/bin/so-kibana-config-load

@@ -5,14 +5,16 @@
 if [ ! -z "$1" ]; then
   ndjson_template_file=$1
 else
-  ndjson_template_file='/opt/so/conf/kibana/saved_objects.ndjson.template'
+  ndjson_template_file='/opt/so/conf/kibana/saved_objects.ndjson'
 fi
 
 if [ -f "$ndjson_template_file" ]; then
   ndjson_file=$(echo $ndjson_template_file | sed -e "s/\.template$//")
   # Copy template file
   #cp /opt/so/conf/kibana/saved_objects.ndjson.template /opt/so/conf/kibana/saved_objects.ndjson
-  cp "$ndjson_template_file" "$ndjson_file"
+  if [ "$ndjson_template_file" != "$ndjson_file" ]; then
+    cp "$ndjson_template_file" "$ndjson_file"
+  fi
 
   # SOCtopus and Manager
   if grep -lq 'PLACEHOLDER' "$ndjson_file"; then

salt/kibana/files/config_saved_objects.ndjson

@@ -1 +1,19 @@
-{"attributes": {"buildNum":39457,"defaultIndex":"2289a0c0-6970-11ea-a0cd-ffa0f6a1bc29","defaultRoute":"/app/dashboards#/view/a8411b30-6d03-11ea-b301-3d6c35840645","discover:sampleSize":100,"theme:darkMode":true,"timepicker:timeDefaults":"{\n  \"from\": \"now-24h\",\n  \"to\": \"now\"\n}"},"securitySolution:defaultIndex": ["apm-*-transaction*","traces-apm*","auditbeat-*","endgame-*","filebeat-*","logs-*","packetbeat-*","winlogbeat-*","so-*"],"coreMigrationVersion":"7.15.0","id":"7.15.0","migrationVersion":{"config":"7.13.0"},"references":[],"sort":[1633625537804,2310],"type":"config","updated_at":"2021-10-07T16:52:17.804Z","version":"Wzg1NDE3LDVd"}
+{
+	"attributes": {
+		"buildNum": 39457,
+		"defaultIndex": "2289a0c0-6970-11ea-a0cd-ffa0f6a1bc29",
+		"defaultRoute": "/app/dashboards#/view/a8411b30-6d03-11ea-b301-3d6c35840645",
+		"discover:sampleSize": 100,
+		"theme:darkMode": true,
+		"timepicker:timeDefaults": "{\n  \"from\": \"now-24h\",\n  \"to\": \"now\"\n}"
+	},
+	"coreMigrationVersion": "7.15.0",
+	"id": "7.15.0",
+	"migrationVersion": {
+		"config": "7.13.0"
+	},
+	"references": [],
+	"type": "config",
+	"updated_at": "2021-10-10T10:10:10.105Z",
+	"version": "WzI5NzUsMl0="
+}

salt/kibana/files/securitySolution_saved_objects.ndjson

@@ -0,0 +1,17 @@
+{
+	"attributes": {
+		"buildNum": 39457,
+		"defaultIndex": "2289a0c0-6970-11ea-a0cd-ffa0f6a1bc29",
+		"defaultRoute": "/app/dashboards#/view/a8411b30-6d03-11ea-b301-3d6c35840645",
+		"securitySolution:defaultIndex": ["apm-*-transaction*", "traces-apm*", "auditbeat-*", "endgame-*", "filebeat-*", "logs-*", "packetbeat-*", "winlogbeat-*", "so-*"]
+	},
+	"coreMigrationVersion": "7.15.0",
+	"id": "7.15.0",
+	"migrationVersion": {
+		"config": "7.13.0"
+	},
+	"references": [],
+	"type": "config",
+	"updated_at": "2021-10-10T10:10:10.105Z",
+	"version": "WzI5NzUsMl0="
+}

salt/kibana/so_config_load.sls

@@ -1,6 +1,7 @@
 include:
   - kibana
   - kibana.so_dashboard_load
+  - kibana.so_securitySolution_load
 
 config_saved_objects:
   file.managed:

salt/kibana/so_dashboard_load.sls

@@ -3,14 +3,14 @@ include:
 
 dashboard_saved_objects_template:
   file.managed:
-    - name: /opt/so/conf/kibana/saved_objects.ndjson.template
+    - name: /opt/so/conf/kibana/saved_objects.ndjson
     - source: salt://kibana/files/saved_objects.ndjson
     - user: 932
     - group: 939
 
 so-kiba-dashboard-load:
   cmd.run:
-    - name: /usr/sbin/so-kibana-config-load /opt/so/conf/kibana/saved_objects.ndjson.template
+    - name: /usr/sbin/so-kibana-config-load /opt/so/conf/kibana/saved_objects.ndjson
     - cwd: /opt/so
     - require:
       - sls: kibana

salt/kibana/so_securitySolution_load.sls

@@ -0,0 +1,17 @@
+include:
+  - kibana
+
+securitySolution_saved_objects:
+  file.managed:
+    - name: /opt/so/conf/kibana/securitySolution_saved_objects.ndjson
+    - source: salt://kibana/files/securitySolution_saved_objects.ndjson
+    - user: 932
+    - group: 939
+
+so-kiba-securitySolution_saved_objects-load:
+  cmd.run:
+    - name: /usr/sbin/so-kibana-config-load /opt/so/conf/kibana/securitySolution_saved_objects.ndjson
+    - cwd: /opt/so
+    - require:
+      - sls: kibana
+      - file: securitySolution_saved_objects

setup/so-setup

@@ -811,7 +811,7 @@ echo "1" > /root/accept_changes
 		salt-call state.apply -l info soc >> $setup_log 2>&1
 
 		set_progress_str 70 "$(print_salt_state_apply 'kibana')"
-		salt-call state.apply -l info kibana.so_default_load >> $setup_log 2>&1
+		salt-call state.apply -l info kibana.so_config_load >> $setup_log 2>&1
 
 		set_progress_str 70 "Setting up default Space in Kibana"
 		so-kibana-space-defaults >> $setup_log 2>&1