CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

heavynode

Browse Source
This commit is contained in:
m0duspwnens
2020-01-29 10:05:20 -05:00
parent 7150564c70
commit b45241b420
4 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pillar/logstash/master.sls Normal file
View File

@@ -0,0 +1,4 @@
logstash:
pipelines:
master:
config: "/usr/share/logstash/pipelines/master/*.conf"

3
pillar/top.sls
View File

@@ -20,6 +20,9 @@ base:
- auth
- minions.{{ grains.id }}
'G@role:so-master':
- logstash.master
'G@role:so-eval':
- static
- firewall.*

2
salt/logstash/etc/logstash.yml
View File

@@ -63,7 +63,7 @@
#
# path.config:
# /etc/logstash/conf.d is mapped to /usr/share/logstash/pipeline in the Docker image
{% if grains.role != 'so-mastersearch' and grains.role != 'so-heavynode' %}
{% if grains.role != 'so-mastersearch' and grains.role != 'so-heavynode' and grains.role != 'so-master' %}
path.config: /usr/share/logstash/pipeline.enabled/*.conf
{% else %}
#path.config: /usr/share/logstash/pipeline.enabled/*.conf

2
salt/logstash/init.sls
View File

@@ -155,7 +155,7 @@ lscustsync:
lsconfsync:
file.managed:
- name: /opt/so/conf/logstash/conf.enabled.txt
{% if grains.role == 'so-mastersearch' %}
{% if grains.role == 'so-mastersearch' or grains.role == 'so-heavynode' %}
- source: salt://logstash/conf/conf.enabled.txt.so-master
{% else %}
- source: salt://logstash/conf/conf.enabled.txt.{{ nodetype }}