mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-11 03:32:53 +01:00
@@ -23,7 +23,7 @@
|
|||||||
{% set MANAGERIP = salt['pillar.get']('global:managerip', '') %}
|
{% set MANAGERIP = salt['pillar.get']('global:managerip', '') %}
|
||||||
{% from 'filebeat/map.jinja' import THIRDPARTY with context %}
|
{% from 'filebeat/map.jinja' import THIRDPARTY with context %}
|
||||||
{% from 'filebeat/map.jinja' import SO with context %}
|
{% from 'filebeat/map.jinja' import SO with context %}
|
||||||
{% set ES_INCLUDED_NODES = ['so-standalone', 'so-managersearch', 'so-node', 'so-heavynode', 'so-import'] %}
|
{% set ES_INCLUDED_NODES = ['so-eval', 'so-standalone', 'so-managersearch', 'so-node', 'so-heavynode', 'so-import'] %}
|
||||||
|
|
||||||
#only include elastic state for certain nodes
|
#only include elastic state for certain nodes
|
||||||
{% if grains.role in ES_INCLUDED_NODES %}
|
{% if grains.role in ES_INCLUDED_NODES %}
|
||||||
@@ -84,7 +84,7 @@ filebeatmoduleconfsync:
|
|||||||
- source: salt://filebeat/etc/module-setup.yml
|
- source: salt://filebeat/etc/module-setup.yml
|
||||||
- user: root
|
- user: root
|
||||||
- group: root
|
- group: root
|
||||||
- mode: 660
|
- mode: 640
|
||||||
- template: jinja
|
- template: jinja
|
||||||
|
|
||||||
sodefaults_module_conf:
|
sodefaults_module_conf:
|
||||||
|
|||||||
Reference in New Issue
Block a user