From 8ab4dd10d42ac97b522abb2345d45e00ba36f43c Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 7 Apr 2021 16:29:44 -0400
Subject: [PATCH] Add sostatus for telegraf

---
 salt/common/init.sls   | 19 +++++++++++++++++++
 salt/telegraf/init.sls |  1 +
 2 files changed, 20 insertions(+)

diff --git a/salt/common/init.sls b/salt/common/init.sls
index 0ada77e1a..9ee126ac1 100644
--- a/salt/common/init.sls
+++ b/salt/common/init.sls
@@ -297,6 +297,25 @@ commonlogrotateconf:
     - month: '*'
     - dayweek: '*'
 
+# Create the status directory
+sostatusdir:
+  file.directory:
+    - name: /opt/so/log/sostatus
+    - user: 0
+    - group: 0
+    - makedirs: True
+    
+# Install sostatus check cron
+/usr/sbin/so-status -q && echo $? > /opt/so/log/sostatus/status.log 2>&1:
+  cron.present:
+    - user: root
+    - minute: '*/15'
+    - hour: '*'
+    - daymonth: '*'
+    - month: '*'
+    - dayweek: '*'
+
+
 {% if role in ['eval', 'manager', 'managersearch', 'standalone'] %}
 # Lock permissions on the backup directory
 backupdir:
diff --git a/salt/telegraf/init.sls b/salt/telegraf/init.sls
index c4871a0b3..cea4d3f45 100644
--- a/salt/telegraf/init.sls
+++ b/salt/telegraf/init.sls
@@ -73,6 +73,7 @@ so-telegraf:
       - /opt/so/log/stenographer:/var/log/stenographer:ro
       - /opt/so/log/suricata:/var/log/suricata:ro
       - /opt/so/log/raid:/var/log/raid:ro
+      - /opt/so/log/sostatus:/var/log/sostatus:ro
     - watch:
       - file: tgrafconf
       - file: tgrafsyncscripts