CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-01-14 20:21:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

Change how zeek and suri are populated in the minion file

Browse Source
This commit is contained in:
Mike Reeves
2022-09-14 09:53:57 -04:00
parent 064b64f68a
commit a4dc63f3a4
8 changed files with 31 additions and 126 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
salt/common/tools/sbin/so-minion
View File

@@ -160,16 +160,14 @@ function add_patch_pillar_to_minion() {
function add_sensor_to_minion() {
echo "sensor:" >> $PILLARFILE
echo " interface: '$INTERFACE'" >> $PILLARFILE
echo " zeekpin: False" >> $PILLARFILE
echo " zeekpins:" >> $PILLARFILE
echo " - 1" >> $PILLARFILE
echo " zeek_lbprocs: $CORECOUNT" >> $PILLARFILE
echo " suripin: False" >> $PILLARFILE
echo " suripins:" >> $PILLARFILE
echo " - 2" >> $PILLARFILE
echo " suriprocs: $CORECOUNT" >> $PILLARFILE
echo " mtu: 9000" >> $PILLARFILE
echo " uniqueid: $(date '+%s')" >> $PILLARFILE
echo "zeek:" >> $PILLARFILE
echo " config:" >> $PILLARFILE
echo " lb_procs: $CORECOUNT" >> $PILLARFILE
echo "suricata:" >> $PILLARFILE
echo " config:" >> $PILLARFILE
echo " af-packet:" >> $PILLARFILE
echo " threads: $CORECOUNT" >> $PILLARFILE
echo "steno:" >> $PILLARFILE
echo " stenopin: False" >> $PILLARFILE
echo " stenopins:" >> $PILLARFILE