CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Bro Salt Module - Full Pillar Node Automation

Browse Source
This commit is contained in:
Mike Reeves
2018-03-06 14:16:47 -05:00
parent 0fc603ef38
commit 7ade618870
1 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
salt/bro/files/node.cfg
View File

@@ -1,7 +1,8 @@
{%- set interface = salt['pillar.get']('sensor:interface', '') %} {%- set interface = salt['pillar.get']('sensor:interface', '') %}
{%- if salt['pillar.get']('sensor:bro_pins')|length > 1 %}
{%- if salt['pillar.get']('sensor:bro_proxies'|length > 1) %} {%- if salt['pillar.get']('sensor:bro_pins') %}
{%- set proxies = salt['pillar.get']('sensor:bro_proxies') %} {%- if salt['pillar.get']('sensor:bro_proxies') %}
{%- set proxies = salt['pillar.get']('sensor:bro_proxies', '1') %}
{%- else %} {%- else %}
{%- set proxies = (salt['pillar.get']('sensor:bro_pins')|length/10)|round(0, 'ceil')|int %} {%- set proxies = (salt['pillar.get']('sensor:bro_pins')|length/10)|round(0, 'ceil')|int %}
{%- endif %} {%- endif %}
@@ -9,11 +10,11 @@
type=manager type=manager
host=localhost host=localhost
{%- for demproxies in range(proxies) %} {% for demproxies in range(proxies) %}
[proxy-{{ demproxies }}] [proxy-{{ demproxies }}]
type=proxy type=proxy
host=localhost host=localhost
{%- endfor %} {% endfor %}
[worker-1] [worker-1]
type=worker type=worker
@@ -21,12 +22,12 @@ host=localhost
interface=af_packet::{{ interface }} interface=af_packet::{{ interface }}
lb_method=custom lb_method=custom
{%- if salt['pillar.get']('sensor:bro_lbprocs'|length > 1) %} {%- if salt['pillar.get']('sensor:bro_lbprocs') %}
lb_procs={{ lbprocs }} lb_procs={{ salt['pillar.get']('sensor:bro_lbprocs', '45') }}
{%- else %} {%- else %}
lb_procs={{ salt['pillar.get']('sensor:bro_pins')|length }} lb_procs={{ salt['pillar.get']('sensor:bro_pins')|length }}
{%- endif %} {%- endif %}
{%- if salt['pillar.get']('sensor:bro_pins'|length > 1) %} {%- if salt['pillar.get']('sensor:bro_pins') %}
pin_cpus={{ salt['pillar.get']('sensor:bro_pins')|join(", ") }} pin_cpus={{ salt['pillar.get']('sensor:bro_pins')|join(", ") }}
{%- endif %} {%- endif %}
af_packet_fanout_id=23 af_packet_fanout_id=23