CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-02-01 12:53:36 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #888 from Security-Onion-Solutions/feature/strelka_rules

Browse Source 
Feature/strelka rules
This commit is contained in:
weslambert
2020-06-24 13:28:52 -04:00
committed by GitHub
parent 8bd6c067aa f5bb831edf
commit 83ed21314a
5 changed files with 33 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/strelka/init.sls
View File

@@ -15,6 +15,7 @@
{%- set MASTER = grains['master'] %}
{%- set MASTERIP = salt['pillar.get']('static:masterip', '') %}
{% set VERSION = salt['pillar.get']('static:soversion', 'HH1.2.2') %}
{%- set STRELKA_RULES = salt['pillar.get']('strelka:rules', '1') -%}
# Strelka config
strelkaconfdir:
@@ -32,6 +33,9 @@ strelkasync:
- user: 939
- group: 939
- template: jinja
{%- if STRELKA_RULES != 1 %}
- exclude_pat: rules/
{%- endif %}
strelkadatadir:
file.directory:
@@ -87,7 +91,7 @@ strelka_backend:
- image: {{ MASTER }}:5000/soshybridhunter/so-strelka-backend:{{ VERSION }}
- binds:
- /opt/so/conf/strelka/backend/:/etc/strelka/:ro
- /opt/so/conf/strelka/backend/yara:/etc/yara/:ro
- /opt/so/conf/strelka/rules/:/etc/yara/:ro
- name: so-strelka-backend
- command: strelka-backend
- restart_policy: on-failure

2
salt/top.sls
View File

@@ -7,7 +7,7 @@
{%- set DOMAINSTATS = salt['pillar.get']('master:domainstats', '0') -%}
{%- set FLEETMASTER = salt['pillar.get']('static:fleet_master', False) -%}
{%- set FLEETNODE = salt['pillar.get']('static:fleet_node', False) -%}
{%- set STRELKA = salt['pillar.get']('static:strelka', '0') -%}
{%- set STRELKA = salt['pillar.get']('strelka:enabled', '0') -%}
base: