From 9cba8c26cd2682d34397977c62288447a5417209 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Thu, 8 Feb 2018 11:19:48 -0500
Subject: [PATCH] ES salt module - Add logstash linkage

---
 salt/elastic/init.sls | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/salt/elastic/init.sls b/salt/elastic/init.sls
index e86d295d5..8b0c99754 100644
--- a/salt/elastic/init.sls
+++ b/salt/elastic/init.sls
@@ -24,6 +24,42 @@ elasticsearch:
     - gid: 930
     - home: /opt/so/conf/elasticsearch
 
+# Add the logstash user for the jog4j settings
+logstash:
+  user.present:
+    - uid: 931
+    - gid: 931
+    - home: /opt/so/conf/logstash
+
+file.directory:
+  - name: /opt/so/conf/logstash
+  - user: 931
+  - group: 939
+  - makedirs: True
+
+file.manage:
+  - name: /opt/so/conf/logstash/log4j2.properties
+  - source: salt://logstash/files/log4j2.properties
+  - user: 931
+  - group: 939
+
+file.directory:
+  - name: /opt/so/conf/elasticsearch
+  - user: 930
+  - group: 939
+
+file.directory:
+  - name: /nsm/elasticsearch
+  - user: 930
+  - group: 939
+  - makedirs: True
+
+file.directory:
+  - name: /opt/so/log/elasticsearch
+  - user: 930
+  - group: 939
+  - makedirs: True
+
 so-elasticsearch:
   dockerng.running:
     - image: pillaritem/so-elasticsearch