CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #13000 from Security-Onion-Solutions/soupz

Browse Source 
Backup Suricata for migration
This commit is contained in:
Mike Reeves
2024-05-13 10:12:34 -04:00
committed by GitHub
parent d120326cb9 9d6f6c7893
commit 927fe91f25
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
salt/manager/tools/sbin/soup
View File

@@ -583,6 +583,7 @@ up_to_2.4.60() {
up_to_2.4.70() { up_to_2.4.70() {
playbook_migration playbook_migration
suricata_idstools_migration
toggle_telemetry toggle_telemetry
add_detection_test_pillars add_detection_test_pillars
INSTALLEDVERSION=2.4.70 INSTALLEDVERSION=2.4.70
@@ -634,6 +635,26 @@ ASSIST_EOF
fi fi
} }
suricata_idstools_migration() {
#Backup the pillars for idstools
mkdir -p /nsm/backup/detections-migration/idstools
rsync -av /opt/so/saltstack/local/pillar/idstools/* /nsm/backup/detections-migration/idstools
if [[ $? -eq 0 ]]; then
echo "IDStools configuration has been backed up."
else
fail "Error: rsync failed to copy the files. IDStools configuration has not been backed up."
fi
#Backup Thresholds
mkdir -p /nsm/backup/detections-migration/suricata
rsync -av /opt/so/saltstack/local/salt/suricata/thresholding /nsm/backup/detections-migration/suricata
if [[ $? -eq 0 ]]; then
echo "Suricata thresholds have been backed up."
else
fail "Error: rsync failed to copy the files. Thresholds have not been backed up."
fi
}
playbook_migration() { playbook_migration() {
# Start SOC Detections migration # Start SOC Detections migration
mkdir -p /nsm/backup/detections-migration/{suricata,sigma/rules,elastalert} mkdir -p /nsm/backup/detections-migration/{suricata,sigma/rules,elastalert}