mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
@@ -389,6 +389,17 @@ enable_standard_analyst_3000_{{ip}}:
|
|||||||
- position: 1
|
- position: 1
|
||||||
- save: True
|
- save: True
|
||||||
|
|
||||||
|
enable_standard_analyst_7000_{{ip}}:
|
||||||
|
iptables.insert:
|
||||||
|
- table: filter
|
||||||
|
- chain: DOCKER-USER
|
||||||
|
- jump: ACCEPT
|
||||||
|
- proto: tcp
|
||||||
|
- source: {{ ip }}
|
||||||
|
- dport: 7000
|
||||||
|
- position: 1
|
||||||
|
- save: True
|
||||||
|
|
||||||
enable_standard_analyst_9000_{{ip}}:
|
enable_standard_analyst_9000_{{ip}}:
|
||||||
iptables.insert:
|
iptables.insert:
|
||||||
- table: filter
|
- table: filter
|
||||||
|
|||||||
12
salt/soctopus/files/SOCtopus.conf
Normal file
12
salt/soctopus/files/SOCtopus.conf
Normal file
@@ -0,0 +1,12 @@
|
|||||||
|
{%- set ip = salt['pillar.get']('static:masterip', '') %}
|
||||||
|
|
||||||
|
[es]
|
||||||
|
es_url = http://{{ ip }}:9200
|
||||||
|
|
||||||
|
[hive]
|
||||||
|
hive_url = http://{{ ip }}:9000
|
||||||
|
hive_key = YOURHIVEAPIKEYHERE -- TO LATER BE REPLACED BY JINJA
|
||||||
|
|
||||||
|
[log]
|
||||||
|
logfile = /tmp/soctopus.log
|
||||||
|
|
||||||
24
salt/soctopus/init.sls
Normal file
24
salt/soctopus/init.sls
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
soctopusdir:
|
||||||
|
file.directory:
|
||||||
|
- name: /opt/so/conf/soctopus
|
||||||
|
- user: 939
|
||||||
|
- group: 939
|
||||||
|
- makedirs: True
|
||||||
|
|
||||||
|
soctopussync:
|
||||||
|
file.recurse:
|
||||||
|
- name: /opt/so/conf/soctopus
|
||||||
|
- source: salt://soctopus/files
|
||||||
|
- user: 939
|
||||||
|
- group: 939
|
||||||
|
- template: jinja
|
||||||
|
|
||||||
|
so-soctopus:
|
||||||
|
docker_container.running:
|
||||||
|
- image: wlambert/soctopus
|
||||||
|
- hostname: soctopus
|
||||||
|
- binds:
|
||||||
|
- /opt/so/conf/soctopus/SOCtopus.conf:/SOCtopus/SOCtopus.conf:ro
|
||||||
|
- port_bindings:
|
||||||
|
- 0.0.0.0:7000:7000
|
||||||
|
|
||||||
Reference in New Issue
Block a user