mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 09:42:46 +01:00
Add ES settings to pillar
This commit is contained in:
@@ -1068,10 +1068,28 @@ elasticsearch_pillar() {
|
||||
" log_size_limit: $log_size_limit"\
|
||||
" cur_close_days: $CURCLOSEDAYS"\
|
||||
" route_type: hot"\
|
||||
" replicas: 0"\
|
||||
" true_cluster: False"
|
||||
" true_cluster_name: so"
|
||||
" index_settings:"\
|
||||
" so-beats:"\
|
||||
" shards: 1"\
|
||||
" so-firewall:"\
|
||||
" shards: 1"\
|
||||
" so-ids:"\
|
||||
" shards: 1"\
|
||||
" so-import:"\
|
||||
" shards: 1"\
|
||||
" so-osquery:"\
|
||||
" shards: 1"\
|
||||
" so-ossec:"\
|
||||
" shards: 1"\
|
||||
" so-strelka:"\
|
||||
" shards: 1"\
|
||||
" so-syslog:"\
|
||||
" shards: 1"\
|
||||
" so-zeek:"\
|
||||
" shards: 5"\
|
||||
" replicas: 0"\
|
||||
"" >> "$pillar_file"
|
||||
|
||||
if [ "$install_type" != 'EVAL' ] && [ "$install_type" != 'HELIXSENSOR' ] && [ "$install_type" != 'MASTERSEARCH' ] && [ "$install_type" != 'STANDALONE' ]; then
|
||||
|
||||
Reference in New Issue
Block a user