CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-02-20 22:15:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

More Playbook Fixes - Issue #1064

Browse Source
This commit is contained in:
Josh Brower
2020-08-07 13:35:43 -04:00
parent ddd099233a
commit a8b980b6a7
4 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/soctopus/files/templates/generic.template
View File

@@ -1,7 +1,9 @@
{% set es = salt['pillar.get']('global:managerip', '') %}
{% set hivehost = salt['pillar.get']('global:managerip', '') %}
{% set hivekey = salt['pillar.get']('global:hivekey', '') %}
alert: hivealerter
alert:
- "modules.so.playbook-es.PlaybookESAlerter"
- "hivealerter"
hive_connection:
hive_host: http://{{hivehost}}
@@ -24,7 +26,6 @@ hive_alert_config:
follow: True
caseTemplate: '5000'
alert: modules.so.playbook-es.PlaybookESAlerter
elasticsearch_host: "{{ es }}:9200"
play_title: ""
event.module: "playbook"

5
salt/soctopus/files/templates/osquery.template
View File

@@ -1,7 +1,9 @@
{% set es = salt['pillar.get']('global:managerip', '') %}
{% set hivehost = salt['pillar.get']('global:managerip', '') %}
{% set hivekey = salt['pillar.get']('global:hivekey', '') %}
alert: hivealerter
alert:
- "modules.so.playbook-es.PlaybookESAlerter"
- "hivealerter"
hive_connection:
hive_host: http://{{hivehost}}
@@ -31,7 +33,6 @@ hive_alert_config:
caseTemplate: '5000'
alert: modules.so.playbook-es.PlaybookESAlerter
elasticsearch_host: "{{ es }}:9200"
play_title: ""
event.module: "playbook"