CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Adjust the elasticsearch config

Browse Source
This commit is contained in:
Mike Reeves
2020-12-03 10:38:18 -05:00
parent 3e322c38eb
commit 94253e92a6
1 changed files with 9 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
salt/elasticsearch/files/elasticsearch.yml
View File

@@ -13,7 +13,7 @@ network.host: 0.0.0.0
# minimum_master_nodes need to be explicitly set when bound on a public IP # minimum_master_nodes need to be explicitly set when bound on a public IP
# set to 1 to allow single node clusters # set to 1 to allow single node clusters
# Details: https://github.com/elastic/elasticsearch/pull/17288 # Details: https://github.com/elastic/elasticsearch/pull/17288
discovery.zen.minimum_master_nodes: 1 #discovery.zen.minimum_master_nodes: 1
# This is a test -- if this is here, then the volume is mounted correctly. # This is a test -- if this is here, then the volume is mounted correctly.
path.logs: /var/log/elasticsearch path.logs: /var/log/elasticsearch
action.destructive_requires_name: true action.destructive_requires_name: true
@@ -38,9 +38,9 @@ cluster.routing.allocation.disk.watermark.flood_stage: 98%
#xpack.security.http.ssl.client_authentication: none #xpack.security.http.ssl.client_authentication: none
#xpack.security.authc: #xpack.security.authc:
# anonymous: # anonymous:
# username: anonymous_user # username: anonymous_user
# roles: superuser # roles: superuser
# authz_exception: true # authz_exception: true
{%- endif %} {%- endif %}
node.attr.box_type: {{ NODE_ROUTE_TYPE }} node.attr.box_type: {{ NODE_ROUTE_TYPE }}
node.name: {{ grains.host }} node.name: {{ grains.host }}
@@ -48,17 +48,16 @@ script.max_compilations_rate: 1000/1m
{%- if TRUECLUSTER is sameas true %} {%- if TRUECLUSTER is sameas true %}
{%- if grains.role == 'so-manager' %} {%- if grains.role == 'so-manager' %}
{%- if salt['pillar.get']('nodestab', {}) %} {%- if salt['pillar.get']('nodestab', {}) %}
node.roles: [ master, remote_cluster_client ] node.roles: [ master, data, remote_cluster_client ]
discovery.seed_hosts: discovery.seed_hosts:
- {{ grains.master }} - {{ grains.master }}
cluster.initial_master_nodes: {%- for SN, SNDATA in salt['pillar.get']('nodestab', {}).items() %}
- {{ grains.master }} - {{ SN.split('_')|first }}
{%- endfor %}
{%- endif %} {%- endif %}
{%- else %} {%- else %}
node.roles: [ data, ingest, ml ] node.roles: [ data, ingest, ml ]
discovery.seed_hosts: discovery.seed_hosts:
- {{ grains.master }} - {{ grains.master }}
cluster.initial_master_nodes:
- {{ grains.master }}
{%- endif %} {%- endif %}
{%- endif %} {%- endif %}