mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Fix Wazuh paths for logstash
This commit is contained in:
@@ -359,6 +359,17 @@ enable_minion_osquery_8080_{{ip}}:
|
|||||||
- position: 1
|
- position: 1
|
||||||
- save: True
|
- save: True
|
||||||
|
|
||||||
|
enable_minion_wazuh_55000_{{ip}}:
|
||||||
|
iptables.insert:
|
||||||
|
- table: filter
|
||||||
|
- chain: DOCKER-USER
|
||||||
|
- jump: ACCEPT
|
||||||
|
- proto: tcp
|
||||||
|
- source: {{ ip }}
|
||||||
|
- dport: 55000
|
||||||
|
- position: 1
|
||||||
|
- save: True
|
||||||
|
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
|
|
||||||
# Allow Forward Nodes to send their beats traffic
|
# Allow Forward Nodes to send their beats traffic
|
||||||
|
|||||||
@@ -24,7 +24,7 @@
|
|||||||
###
|
###
|
||||||
|
|
||||||
# Connection variables
|
# Connection variables
|
||||||
API_IP="localhost"
|
API_IP="{{ ip }}"
|
||||||
API_PORT="55000"
|
API_PORT="55000"
|
||||||
PROTOCOL="https"
|
PROTOCOL="https"
|
||||||
USER="foo"
|
USER="foo"
|
||||||
|
|||||||
Reference in New Issue
Block a user