CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1273 from Security-Onion-Solutions/fix/zeek_syslog_default

Browse Source 
Fix/zeek syslog default
This commit is contained in:
weslambert
2020-08-31 12:32:52 -04:00
committed by GitHub
parent dc3b065a41 5ed5e6603d
commit 96f25914db
1 changed files with 41 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
setup/so-functions
View File

@@ -1980,6 +1980,47 @@ zeek_logs_enabled() {
for BLOG in "${BLOGS[@]}"; do for BLOG in "${BLOGS[@]}"; do
echo " - $BLOG" | tr -d '"' >> "$zeeklogs_pillar" echo " - $BLOG" | tr -d '"' >> "$zeeklogs_pillar"
done done
elif [ "$install_type" == "EVAL" ]; then
printf '%s\n'\
" - conn"\
" - dce_rpc"\
" - dhcp"\
" - dhcpv6"\
" - dnp3"\
" - dns"\
" - dpd"\
" - files"\
" - ftp"\
" - http"\
" - intel"\
" - irc"\
" - kerberos"\
" - modbus"\
" - mqtt"\
" - notice"\
" - ntlm"\
" - openvpn"\
" - pe"\
" - radius"\
" - rfb"\
" - rdp"\
" - signatures"\
" - sip"\
" - smb_files"\
" - smb_mapping"\
" - smtp"\
" - snmp"\
" - software"\
" - ssh"\
" - ssl"\
" - syslog"\
" - telnet"\
" - tunnel"\
" - weird"\
" - mysql"\
" - socks"\
" - x509" >> "$zeeklogs_pillar"
# Disable syslog log by default
else else
printf '%s\n'\ printf '%s\n'\
" - conn"\ " - conn"\
@@ -2013,7 +2054,6 @@ zeek_logs_enabled() {
" - software"\ " - software"\
" - ssh"\ " - ssh"\
" - ssl"\ " - ssl"\
" - syslog"\
" - telnet"\ " - telnet"\
" - tunnel"\ " - tunnel"\
" - weird"\ " - weird"\