changes for multipipelines / mastersearch node - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/124

2025-12-20 16:03:06 +01:00 · 2020-01-21 16:39:42 -05:00
parent 0c08f8e727
commit a39edad3f6
113 changed files with 5613 additions and 72 deletions
--- a/pillar/logstash/mastersearch.sls
+++ b/pillar/logstash/mastersearch.sls
@@ -0,0 +1,6 @@
+logstash:
+  pipelines:
+    master:
+      config: "/usr/share/logstash/pipelines/master/*.conf"
+    search:
+      config: "/usr/share/logstash/pipelines/search/*.conf"
--- a/pillar/top.sls
+++ b/pillar/top.sls
@@ -8,7 +8,11 @@ base:
    - firewall.*
    - brologs

-  'G@role:so-master':
+  'G@role:so-mastersearch':
+    - logstash.mastersearch
+
+  'G@role:so-master or G@role:so-mastersearch':
+    - match: compound
    - minions.{{ grains.id }}
    - static
    - firewall.*