From acba82d1948b298f3a9721abede8b7575440b90a Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Mon, 8 Nov 2021 11:04:51 -0500
Subject: [PATCH] Update dist install menus' top text

---
 setup/so-whiptail | 24 ++++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

diff --git a/setup/so-whiptail b/setup/so-whiptail
index db5e36516..3f8628a30 100755
--- a/setup/so-whiptail
+++ b/setup/so-whiptail
@@ -778,9 +778,17 @@ whiptail_install_type_dist() {
 
 whiptail_install_type_dist_new() {
 	[ -n "$TESTING" ] && return
+
+	local mngr_msg
+	read -r -d '' mngr_msg <<- EOM
+	Choose a distributed manager type to start a new grid.
 	
-	install_type=$(whiptail --title "$whiptail_title" --radiolist \
-	"Choose distributed manager type to start a new grid. See https://docs.securityonion.net/architecture for details." 10 75 2 \
+	See https://docs.securityonion.net/architecture for details.
+
+	Note: MANAGER is the recommended option for most users. MANAGERSEARCH should only be used in very specific situations.
+	EOM
+	
+	install_type=$(whiptail --title "$whiptail_title" --radiolist "$mngr_msg" 15 75 2 \
 		"MANAGER" "New grid, requires separate search node(s) " ON \
 		"MANAGERSEARCH" "New grid, separate search node(s) are optional " OFF \
 		3>&1 1>&2 2>&3
@@ -792,9 +800,17 @@ whiptail_install_type_dist_new() {
 
 whiptail_install_type_dist_existing() {
 	[ -n "$TESTING" ] && return
+
+	local node_msg
+	read -r -d '' node_msg <<- EOM
+	Choose a distributed node type to join to an existing grid.
 	
-	install_type=$(whiptail --title "$whiptail_title" --radiolist \
-	"Choose distributed node type to join to an existing grid. See https://docs.securityonion.net/architecture for details." 14 57 4 \
+	See https://docs.securityonion.net/architecture for details.
+
+	Note: Heavy nodes (HEAVYNODE) are NOT recommended for most users.
+	EOM
+	
+	install_type=$(whiptail --title "$whiptail_title" --radiolist "$node_msg" 17 57 4 \
 		"SENSOR" "Create a forward only sensor " ON \
 		"SEARCHNODE" "Add a search node with parsing " OFF \
 		"FLEET" "Dedicated Fleet Osquery Node " OFF \