mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
support for fleet, heavynode, receiver, idh
This commit is contained in:
@@ -11,7 +11,6 @@ import re
|
|||||||
import threading
|
import threading
|
||||||
|
|
||||||
def call_so_firewall_minion(ip, role):
|
def call_so_firewall_minion(ip, role):
|
||||||
print("call_so_firewall_minion called")
|
|
||||||
try:
|
try:
|
||||||
# Start so-firewall-minion as a subprocess
|
# Start so-firewall-minion as a subprocess
|
||||||
process = subprocess.Popen(
|
process = subprocess.Popen(
|
||||||
|
|||||||
18
salt/setup/virt/fleet.yaml
Normal file
18
salt/setup/virt/fleet.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
MAINIP:
|
||||||
|
MNIC: eth0
|
||||||
|
NODE_DESCRIPTION: 'vm'
|
||||||
|
ES_HEAP_SIZE:
|
||||||
|
PATCHSCHEDULENAME:
|
||||||
|
INTERFACE:
|
||||||
|
NODETYPE: FLEET
|
||||||
|
CORECOUNT: 8
|
||||||
|
LSHOSTNAME:
|
||||||
|
LSHEAP:
|
||||||
|
CPUCORES: 8
|
||||||
|
IDH_MGTRESTRICT:
|
||||||
|
IDH_SERVICES:
|
||||||
|
CPU: 8
|
||||||
|
MEMORY: 8
|
||||||
|
DISKS: 0
|
||||||
|
COPPER: 0
|
||||||
|
SFP: 0
|
||||||
18
salt/setup/virt/heavynode.yaml
Normal file
18
salt/setup/virt/heavynode.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
MAINIP:
|
||||||
|
MNIC: eth0
|
||||||
|
NODE_DESCRIPTION: 'vm'
|
||||||
|
ES_HEAP_SIZE:
|
||||||
|
PATCHSCHEDULENAME:
|
||||||
|
INTERFACE: bond0
|
||||||
|
NODETYPE: HEAVYNODE
|
||||||
|
CORECOUNT: 8
|
||||||
|
LSHOSTNAME:
|
||||||
|
LSHEAP:
|
||||||
|
CPUCORES: 8
|
||||||
|
IDH_MGTRESTRICT:
|
||||||
|
IDH_SERVICES:
|
||||||
|
CPU: 8
|
||||||
|
MEMORY: 16
|
||||||
|
DISKS: 0
|
||||||
|
COPPER: 0
|
||||||
|
SFP: 0
|
||||||
18
salt/setup/virt/idh.yaml
Normal file
18
salt/setup/virt/idh.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
MAINIP:
|
||||||
|
MNIC: eth0
|
||||||
|
NODE_DESCRIPTION: 'vm'
|
||||||
|
ES_HEAP_SIZE:
|
||||||
|
PATCHSCHEDULENAME:
|
||||||
|
INTERFACE:
|
||||||
|
NODETYPE: IDH
|
||||||
|
CORECOUNT: 2
|
||||||
|
LSHOSTNAME:
|
||||||
|
LSHEAP:
|
||||||
|
CPUCORES: 2
|
||||||
|
IDH_MGTRESTRICT:
|
||||||
|
IDH_SERVICES:
|
||||||
|
CPU: 2
|
||||||
|
MEMORY: 1
|
||||||
|
DISKS: 0
|
||||||
|
COPPER: 0
|
||||||
|
SFP: 0
|
||||||
18
salt/setup/virt/receiver.yaml
Normal file
18
salt/setup/virt/receiver.yaml
Normal file
@@ -0,0 +1,18 @@
|
|||||||
|
MAINIP:
|
||||||
|
MNIC: eth0
|
||||||
|
NODE_DESCRIPTION: 'vm'
|
||||||
|
ES_HEAP_SIZE:
|
||||||
|
PATCHSCHEDULENAME:
|
||||||
|
INTERFACE:
|
||||||
|
NODETYPE: RECEIVER
|
||||||
|
CORECOUNT: 2
|
||||||
|
LSHOSTNAME:
|
||||||
|
LSHEAP:
|
||||||
|
CPUCORES: 2
|
||||||
|
IDH_MGTRESTRICT:
|
||||||
|
IDH_SERVICES:
|
||||||
|
CPU: 2
|
||||||
|
MEMORY: 8
|
||||||
|
DISKS: 0
|
||||||
|
COPPER: 0
|
||||||
|
SFP: 0
|
||||||
@@ -1,18 +1,18 @@
|
|||||||
MAINIP:
|
MAINIP:
|
||||||
MNIC: eth0
|
MNIC: eth0
|
||||||
NODE_DESCRIPTION: 'virt search'
|
NODE_DESCRIPTION: 'vm'
|
||||||
ES_HEAP_SIZE:
|
ES_HEAP_SIZE:
|
||||||
PATCHSCHEDULENAME:
|
PATCHSCHEDULENAME:
|
||||||
INTERFACE: bond0
|
INTERFACE:
|
||||||
NODETYPE: SEARCHNODE
|
NODETYPE: SEARCHNODE
|
||||||
CORECOUNT: 16
|
CORECOUNT: 8
|
||||||
LSHOSTNAME:
|
LSHOSTNAME:
|
||||||
LSHEAP:
|
LSHEAP:
|
||||||
CPUCORES: 16
|
CPUCORES: 8
|
||||||
IDH_MGTRESTRICT:
|
IDH_MGTRESTRICT:
|
||||||
IDH_SERVICES:
|
IDH_SERVICES:
|
||||||
CPU: 16
|
CPU: 8
|
||||||
MEMORY: 32
|
MEMORY: 16
|
||||||
DISKS: 1
|
DISKS: 1
|
||||||
COPPER: 0
|
COPPER: 0
|
||||||
SFP: 0
|
SFP: 0
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
MAINIP:
|
MAINIP:
|
||||||
MNIC: eth0
|
MNIC: eth0
|
||||||
NODE_DESCRIPTION: 'virt sensor'
|
NODE_DESCRIPTION: 'vm'
|
||||||
ES_HEAP_SIZE:
|
ES_HEAP_SIZE:
|
||||||
PATCHSCHEDULENAME:
|
PATCHSCHEDULENAME:
|
||||||
INTERFACE: bond0
|
INTERFACE: bond0
|
||||||
@@ -12,7 +12,7 @@ CPUCORES: 4
|
|||||||
IDH_MGTRESTRICT:
|
IDH_MGTRESTRICT:
|
||||||
IDH_SERVICES:
|
IDH_SERVICES:
|
||||||
CPU: 8
|
CPU: 8
|
||||||
MEMORY: 8
|
MEMORY: 12
|
||||||
DISKS: 0
|
DISKS: 0
|
||||||
COPPER: 0
|
COPPER: 0
|
||||||
SFP: 0
|
SFP: 0
|
||||||
|
|||||||
@@ -11,11 +11,24 @@
|
|||||||
{% do DATA.update({'CORECOUNT': grains.num_cpus}) %}
|
{% do DATA.update({'CORECOUNT': grains.num_cpus}) %}
|
||||||
{% do DATA.update({'CPUCORES': grains.num_cpus}) %}
|
{% do DATA.update({'CPUCORES': grains.num_cpus}) %}
|
||||||
|
|
||||||
|
{% if nodetype in ['searchnode', 'receiver', 'fleet', 'heavynode'] %}
|
||||||
|
|
||||||
{% if nodetype == "searchnode" %}
|
{# we can't use the host grain here because the grain may not be updated yet from the hostname change #}
|
||||||
|
|
||||||
{% do DATA.update({'LSHOSTNAME': grains.id.split("_") | first}) %}
|
{% do DATA.update({'LSHOSTNAME': grains.id.split("_") | first}) %}
|
||||||
|
|
||||||
|
{% if total_mem >= 32000 or nodetype in ['managersearch','heavynode','standalone'] %}
|
||||||
|
{% set LSHEAP="1000m" %}
|
||||||
|
{% elif nodetype == 'eval' %}
|
||||||
|
{% set LSHEAP="700m" %}
|
||||||
|
{% else %}
|
||||||
|
{% set LSHEAP="500m" %}
|
||||||
|
{% endif %}
|
||||||
|
{% do DATA.update({'LSHEAP': LSHEAP}) %}
|
||||||
|
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% if nodetype in ['searchnode', 'heavynode'] %}
|
||||||
|
|
||||||
{# this replicates the function es_heapsize in so-functions #}
|
{# this replicates the function es_heapsize in so-functions #}
|
||||||
{% if total_mem < 8000 %}
|
{% if total_mem < 8000 %}
|
||||||
{% set ES_HEAP_SIZE = "600m" %}
|
{% set ES_HEAP_SIZE = "600m" %}
|
||||||
@@ -31,13 +44,4 @@
|
|||||||
{% endif %}
|
{% endif %}
|
||||||
{% do DATA.update({'ES_HEAP_SIZE': ES_HEAP_SIZE}) %}
|
{% do DATA.update({'ES_HEAP_SIZE': ES_HEAP_SIZE}) %}
|
||||||
|
|
||||||
{% if total_mem >= 32000 or nodetype in ['managersearch','heavynode','standalone'] %}
|
|
||||||
{% set LSHEAP="1000m" %}
|
|
||||||
{% elif nodetype == 'eval' %}
|
|
||||||
{% set LSHEAP="700m" %}
|
|
||||||
{% else %}
|
|
||||||
{% set LSHEAP="500m" %}
|
|
||||||
{% endif %}
|
|
||||||
{% do DATA.update({'LSHEAP': LSHEAP}) %}
|
|
||||||
|
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
|||||||
Reference in New Issue
Block a user