CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

loadbalance filebeat if across managers and receivers

Browse Source
This commit is contained in:
m0duspwnens
2021-12-10 17:43:06 -05:00
parent fe7247f876
commit 86f67198bf
2 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
salt/filebeat/etc/filebeat.yml
View File

@@ -321,7 +321,19 @@ output.logstash:
enabled: true enabled: true
# The Logstash hosts # The Logstash hosts
hosts: ["{{ MANAGER }}:5644"] hosts:
{%- set LOADBALANCE = ['false'] %}
{%- if grains.role not in ['so-heavynode', 'so-import', 'so-helix', 'so-eval'] %}
{%- for minionid, ip in salt['mine.get']('G@role:so-standalone or G@role:so-manager or G@role:so-managersearch or G@role:so-receiver', 'network.ip_addrs', tgt_type='compound') | dictsort() %}
- "{{ minionid.split('_')[0] }}:5644" #{{ ip[0] }}
{%- if loop.index == 2 %}
{%- do LOADBALANCE.insert(0, 'true') %}
{%- endif %}
{%- endfor %}
loadbalance: {{ LOADBALANCE[0] }}
{%- else %}
- "{{ grains.host }}:5644"
{%- endif %}
# Number of workers per Logstash host. # Number of workers per Logstash host.
worker: {{ FBLSWORKERS }} worker: {{ FBLSWORKERS }}

2
salt/salt/minion.sls
View File

@@ -82,7 +82,7 @@ salt_minion_service_unit_file:
mine_functions: mine_functions:
file.managed: file.managed:
- name: /etc/salt/minion.d/mine_functions.conf - name: /etc/salt/minion.d/mine_functions.conf
- source: salt://salt/etc/mine_functions.conf - source: salt://salt/etc/minion.d/mine_functions.conf
- template: jinja - template: jinja
# this has to be outside the if statement above since there are <requisite>_in calls to this state # this has to be outside the if statement above since there are <requisite>_in calls to this state