From 84e54a8faef8a716b287a7cd10d051bca150d1de Mon Sep 17 00:00:00 2001 From: Wes Lambert Date: Wed, 11 Mar 2020 12:09:34 +0000 Subject: [PATCH] update Eval pillar --- pillar/logstash/eval.sls | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/pillar/logstash/eval.sls b/pillar/logstash/eval.sls index f6cf222b3..df804440c 100644 --- a/pillar/logstash/eval.sls +++ b/pillar/logstash/eval.sls @@ -5,11 +5,6 @@ logstash: - so/0800_input_eval.conf - so/1002_preprocess_json.conf - so/1033_preprocess_snort.conf - - so/6500_ossec.conf - - so/6501_ossec_sysmon.conf - - so/6502_ossec_autoruns.conf - - so/6600_winlogbeat_sysmon.conf - - so/6700_winlogbeat.conf - so/7100_osquery_wel.conf - so/8999_postprocess_rename_type.conf - so/9000_output_bro.conf.jinja @@ -21,8 +16,8 @@ logstash: - so/9600_output_ossec.conf.jinja - so/9700_output_strelka.conf.jinja templates: - - so/beats-template.json - - so/logstash-ossec-template.json - - so/logstash-strelka-template.json - - so/logstash-template.json - - so/logstash-bro-template.json + - so/so-beats-template.json + - so/so-ossec-template.json + - so/so-strelka-template.json + - so/so-template.json + - so/so-zeek-template.json