CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

heavynode

Browse Source
This commit is contained in:
m0duspwnens
2020-01-29 10:05:20 -05:00
parent 7150564c70
commit b45241b420
4 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pillar/logstash/master.sls Normal file
View File

@@ -0,0 +1,4 @@
logstash:
pipelines:
master:
config: "/usr/share/logstash/pipelines/master/*.conf"

3
pillar/top.sls
View File

@@ -20,6 +20,9 @@ base:
- auth - auth
- minions.{{ grains.id }} - minions.{{ grains.id }}
'G@role:so-master':
- logstash.master
'G@role:so-eval': 'G@role:so-eval':
- static - static
- firewall.* - firewall.*

2
salt/logstash/etc/logstash.yml
View File

@@ -63,7 +63,7 @@
# #
# path.config: # path.config:
# /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image # /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image
{% if grains.role != 'so-mastersearch' and grains.role != 'so-heavynode' %} {% if grains.role != 'so-mastersearch' and grains.role != 'so-heavynode' and grains.role != 'so-master' %}
path.config: /usr/share/logstash/pipeline.enabled/*.conf path.config: /usr/share/logstash/pipeline.enabled/*.conf
{% else %} {% else %}
#path.config: /usr/share/logstash/pipeline.enabled/*.conf #path.config: /usr/share/logstash/pipeline.enabled/*.conf

2
salt/logstash/init.sls
View File

@@ -155,7 +155,7 @@ lscustsync:
lsconfsync: lsconfsync:
file.managed: file.managed:
- name: /opt/so/conf/logstash/conf.enabled.txt - name: /opt/so/conf/logstash/conf.enabled.txt
{% if grains.role == 'so-mastersearch' %} {% if grains.role == 'so-mastersearch' or grains.role == 'so-heavynode' %}
- source: salt://logstash/conf/conf.enabled.txt.so-master - source: salt://logstash/conf/conf.enabled.txt.so-master
{% else %} {% else %}
- source: salt://logstash/conf/conf.enabled.txt.{{ nodetype }} - source: salt://logstash/conf/conf.enabled.txt.{{ nodetype }}