Initial composable template configuration and base mappings

salt/logstash/pipelines/config/so/9000_output_zeek.conf.jinja

@@ -15,9 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-zeek"
-      template_name => "so-zeek"
-      template => "/templates/so-zeek-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9002_output_import.conf.jinja

@@ -15,9 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-import"
-      template_name => "so-import"
-      template => "/templates/so-import-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9004_output_flow.conf.jinja

@@ -14,9 +14,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-flow"
-      template_name => "so-flow"
-      template => "/templates/so-flow-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9033_output_snort.conf.jinja

@@ -14,9 +14,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-ids"
-      template_name => "so-ids"
-      template => "/templates/so-ids-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9034_output_syslog.conf.jinja

@@ -15,9 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-syslog"
-      template_name => "so-syslog"
-      template => "/templates/so-syslog-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9050_output_filebeatmodules.conf.jinja

@@ -16,9 +16,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-%{[event][module]}-%{+YYYY.MM.dd}"
-      template_name => "so-common"
-      template => "/templates/so-common-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9100_output_osquery.conf.jinja

@@ -15,9 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-osquery"
-      template_name => "so-osquery"
-      template => "/templates/so-osquery-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9101_output_osquery_livequery.conf.jinja

@@ -37,9 +37,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-osquery"
-      template_name => "so-osquery"
-      template => "/templates/so-osquery-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9200_output_firewall.conf.jinja

@@ -14,9 +14,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-firewall"
-      template_name => "so-firewall"
-      template => "/templates/so-firewall-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9400_output_suricata.conf.jinja

@@ -15,8 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-ids"
-      template_name => "so-ids" 
-      template => "/templates/so-ids-template.json"
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9500_output_beats.conf.jinja

@@ -16,9 +16,6 @@ output {
         password => "{{ ES_PASS }}"
   {% endif %}
         index => "so-beats"
-        template_name => "so-beats"
-        template => "/templates/so-beats-template.json"
-        template_overwrite => true
         ssl => true
         ssl_certificate_verification => false
         document_id => "%{[metadata][_id]}" 
@@ -32,9 +29,6 @@ output {
         password => "{{ ES_PASS }}"
   {% endif %}
         index => "so-beats"
-        template_name => "so-beats"
-        template => "/templates/so-beats-template.json"
-        template_overwrite => true
         ssl => true
         ssl_certificate_verification => false
       }

salt/logstash/pipelines/config/so/9600_output_ossec.conf.jinja

@@ -15,9 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-ossec"
-      template_name => "so-ossec"
-      template => "/templates/so-ossec-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9700_output_strelka.conf.jinja

@@ -15,9 +15,6 @@ output {
       password => "{{ ES_PASS }}"
 {% endif %}
       index => "so-strelka"
-      template_name => "so-strelka"
-      template => "/templates/so-strelka-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }

salt/logstash/pipelines/config/so/9800_output_logscan.conf.jinja

@@ -17,9 +17,6 @@ output {
       password => "{{ ES_PASS }}"
     {% endif %}
       index => "so-logscan"
-      template_name => "so-common"
-      template => "/templates/so-common-template.json"
-      template_overwrite => true
       ssl => true
       ssl_certificate_verification => false
     }