CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-14 13:12:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #14296 from Security-Onion-Solutions/jertel/wip

Browse Source 
annotation/config updates
This commit is contained in:
Jason Ertel
2025-02-25 17:04:13 -05:00
committed by GitHub
parent c8a6aa42fb 9dafa062f8
commit a94d657251
3 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
salt/hydra/soc_hydra.yaml
View File

@@ -2,6 +2,7 @@ hydra:
enabled: enabled:
description: Enables or disables the API authentication system, used for service account authentication. Enabling this feature requires a valid Security Onion license key. Defaults to False. description: Enables or disables the API authentication system, used for service account authentication. Enabling this feature requires a valid Security Onion license key. Defaults to False.
helpLink: connect.html helpLink: connect.html
global: True
config: config:
ttl: ttl:
access_token: access_token:

1
salt/sensoroni/files/sensoroni.json
View File

@@ -8,6 +8,7 @@
"role": "{{ GLOBALS.role }}", "role": "{{ GLOBALS.role }}",
"description": {{ SENSORONIMERGED.config.node_description | tojson }}, "description": {{ SENSORONIMERGED.config.node_description | tojson }},
"address": "{{ GLOBALS.node_ip }}", "address": "{{ GLOBALS.node_ip }}",
"mgmtNic": "{{ GLOBALS.main_interface }}",
"model": "{{ GLOBALS.so_model }}", "model": "{{ GLOBALS.so_model }}",
"pollIntervalMs": {{ SENSORONIMERGED.config.node_checkin_interval_ms }}, "pollIntervalMs": {{ SENSORONIMERGED.config.node_checkin_interval_ms }},
"serverUrl": "https://{{ GLOBALS.url_base }}/sensoroniagents", "serverUrl": "https://{{ GLOBALS.url_base }}/sensoroniagents",

6
salt/soc/soc_soc.yaml
View File

@@ -54,7 +54,11 @@ soc:
title: Log Level title: Log Level
description: The SOC log level, useful for enabling debug logging for advanced troubleshooting. Allowed values are debug, info, warn, error. The SOC log is available at /opt/so/log/soc/sensoroni-server.log. description: The SOC log level, useful for enabling debug logging for advanced troubleshooting. Allowed values are debug, info, warn, error. The SOC log is available at /opt/so/log/soc/sensoroni-server.log.
global: True global: True
regex: ^(info|debug|warn|error)$ options:
- info
- debug
- warn
- error
actions: actions:
description: A list of actions a user can take from the SOC UI against a hunt, alert, and other records. The action must be defined in JSON object format, and contain a "name" key and "links" key. The links is a list of URLs, where the most suitable URL in the list will be the selected URL when the user clicks the action. description: A list of actions a user can take from the SOC UI against a hunt, alert, and other records. The action must be defined in JSON object format, and contain a "name" key and "links" key. The links is a list of URLs, where the most suitable URL in the list will be the selected URL when the user clicks the action.
global: True global: True