CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add Templates for all filebeat modules

Browse Source
This commit is contained in:
Mike Reeves
2021-08-27 14:41:04 -04:00
parent f8cdf5bca3
commit a27263435a
3 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
salt/elasticsearch/templates/so/so-snyk-template.json.jinja
View File

@@ -1,8 +1,8 @@
{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:shards', 1) %}
{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-snyk:shards', 1) %}
{%- set REPLICAS = salt['pillar.get']('elasticsearch:replicas', 0) %}
{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-zeek:refresh', '30s') %}
{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-snyk:refresh', '30s') %}
{
"index_patterns": ["so-zeek-*"],
"index_patterns": ["so-snyk-*"],
"version":50001,
"order":11,
"settings":{

6
salt/elasticsearch/templates/so/so-sophos-template.json.jinja
View File

@@ -1,8 +1,8 @@
{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:shards', 1) %}
{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-sophos:shards', 1) %}
{%- set REPLICAS = salt['pillar.get']('elasticsearch:replicas', 0) %}
{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-zeek:refresh', '30s') %}
{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-sophos:refresh', '30s') %}
{
"index_patterns": ["so-zeek-*"],
"index_patterns": ["so-sophos-*"],
"version":50001,
"order":11,
"settings":{

6
salt/elasticsearch/templates/so/so-squid-template.json.jinja
View File

@@ -1,8 +1,8 @@
{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:shards', 1) %}
{%- set SHARDS = salt['pillar.get']('elasticsearch:index_settings:so-squid:shards', 1) %}
{%- set REPLICAS = salt['pillar.get']('elasticsearch:replicas', 0) %}
{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-zeek:refresh', '30s') %}
{%- set REFRESH = salt['pillar.get']('elasticsearch:index_settings:so-squid:refresh', '30s') %}
{
"index_patterns": ["so-zeek-*"],
"index_patterns": ["so-squid-*"],
"version":50001,
"order":11,
"settings":{