CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-13 12:42:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

Auto-managed Fleet Server URLs

Browse Source
This commit is contained in:
Josh Brower
2023-07-14 08:40:26 -04:00
parent fb8a79e112
commit 78db64a419
6 changed files with 100 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/logstash/defaults.yaml
View File

@@ -21,16 +21,16 @@ logstash:
- fleet
defined_pipelines:
fleet:
- so/0012_input_elastic_agent.conf
- so/0012_input_elastic_agent.conf.jinja
- so/9806_output_lumberjack_fleet.conf.jinja
manager:
- so/0011_input_endgame.conf
- so/0012_input_elastic_agent.conf
- so/0012_input_elastic_agent.conf.jinja
- so/0013_input_lumberjack_fleet.conf
- so/9999_output_redis.conf.jinja
receiver:
- so/0011_input_endgame.conf
- so/0012_input_elastic_agent.conf
- so/0012_input_elastic_agent.conf.jinja
- so/0013_input_lumberjack_fleet.conf
- so/9999_output_redis.conf.jinja
search:

2
salt/logstash/pipelines/config/so/0012_input_elastic_agent.conf → salt/logstash/pipelines/config/so/0012_input_elastic_agent.conf.jinja
View File

@@ -1,7 +1,7 @@
input {
elastic_agent {
port => 5055
tags => [ "elastic-agent" ]
tags => [ "elastic-agent", "input-{{ GLOBALS.hostname }}" ]
ssl => true
ssl_certificate_authorities => ["/usr/share/filebeat/ca.crt"]
ssl_certificate => "/usr/share/logstash/elasticfleet-logstash.crt"