mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
Ensure indices managed by ILM can be managed by Curator
This commit is contained in:
@@ -15,6 +15,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete indices when {{log_size_limit}}(GB) is exceeded.
|
Delete indices when {{log_size_limit}}(GB) is exceeded.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close import indices older than {{cur_close_days}} days.
|
Close import indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete import indices when older than {{ DELETE_DAYS }} days.
|
Delete import indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Strelka indices older than {{cur_close_days}} days.
|
Close Strelka indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete Strelka indices when older than {{ DELETE_DAYS }} days.
|
Delete Strelka indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Suricata indices older than {{cur_close_days}} days.
|
Close Suricata indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete Suricata indices when older than {{ DELETE_DAYS }} days.
|
Delete Suricata indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close syslog indices older than {{cur_close_days}} days.
|
Close syslog indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete syslog indices when older than {{ DELETE_DAYS }} days.
|
Delete syslog indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Zeek indices older than {{cur_close_days}} days.
|
Close Zeek indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete Zeek indices when older than {{ DELETE_DAYS }} days.
|
Delete Zeek indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Beats indices older than {{cur_close_days}} days.
|
Close Beats indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete beats indices when older than {{ DELETE_DAYS }} days.
|
Delete beats indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close elasticsearch indices older than {{cur_close_days}} days.
|
Close elasticsearch indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete elasticsearch indices when older than {{ DELETE_DAYS }} days.
|
Delete elasticsearch indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -11,6 +11,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Firewall indices older than {{cur_close_days}} days.
|
Close Firewall indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -11,6 +11,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete firewall indices when older than {{ DELETE_DAYS }} days.
|
Delete firewall indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -11,6 +11,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close IDS indices older than {{cur_close_days}} days.
|
Close IDS indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -11,6 +11,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete IDS indices when older than {{ DELETE_DAYS }} days.
|
Delete IDS indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Import indices older than {{cur_close_days}} days.
|
Close Import indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete import indices when older than {{ DELETE_DAYS }} days.
|
Delete import indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close kibana indices older than {{cur_close_days}} days.
|
Close kibana indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete kibana indices when older than {{ DELETE_DAYS }} days.
|
Delete kibana indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close kratos indices older than {{cur_close_days}} days.
|
Close kratos indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete kratos indices when older than {{ DELETE_DAYS }} days.
|
Delete kratos indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close logstash indices older than {{cur_close_days}} days.
|
Close logstash indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete logstash indices when older than {{ DELETE_DAYS }} days.
|
Delete logstash indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close netflow indices older than {{cur_close_days}} days.
|
Close netflow indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete netflow indices when older than {{ DELETE_DAYS }} days.
|
Delete netflow indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close osquery indices older than {{cur_close_days}} days.
|
Close osquery indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete import indices when older than {{ DELETE_DAYS }} days.
|
Delete import indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close ossec indices older than {{cur_close_days}} days.
|
Close ossec indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete ossec indices when older than {{ DELETE_DAYS }} days.
|
Delete ossec indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close redis indices older than {{cur_close_days}} days.
|
Close redis indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete redis indices when older than {{ DELETE_DAYS }} days.
|
Delete redis indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Strelka indices older than {{cur_close_days}} days.
|
Close Strelka indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete Strelka indices when older than {{ DELETE_DAYS }} days.
|
Delete Strelka indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close syslog indices older than {{cur_close_days}} days.
|
Close syslog indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete syslog indices when older than {{ DELETE_DAYS }} days.
|
Delete syslog indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Close Zeek indices older than {{cur_close_days}} days.
|
Close Zeek indices older than {{cur_close_days}} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
delete_aliases: False
|
delete_aliases: False
|
||||||
timeout_override:
|
timeout_override:
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ actions:
|
|||||||
description: >-
|
description: >-
|
||||||
Delete Zeek indices when older than {{ DELETE_DAYS }} days.
|
Delete Zeek indices when older than {{ DELETE_DAYS }} days.
|
||||||
options:
|
options:
|
||||||
|
allow_ilm_indices: True
|
||||||
ignore_empty_list: True
|
ignore_empty_list: True
|
||||||
disable_action: False
|
disable_action: False
|
||||||
filters:
|
filters:
|
||||||
|
|||||||
Reference in New Issue
Block a user