CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

enable beat input plugin for telegraf

Browse Source
This commit is contained in:
m0duspwnens
2021-11-04 13:52:45 -04:00
parent edb3b602a9
commit b599b49630
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
salt/telegraf/etc/telegraf.conf
View File

@@ -681,10 +681,10 @@
[[inputs.logstash]] [[inputs.logstash]]
url = "http://localhost:9600" url = "http://localhost:9600"
collect = ["pipelines"] collect = ["pipelines"]
{%- if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %} {%- if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %}
username = "{{ salt['pillar.get']('elasticsearch:auth:users:so_logstash_user:user') }}" username = "{{ salt['pillar.get']('elasticsearch:auth:users:so_logstash_user:user') }}"
password = "{{ salt['pillar.get']('elasticsearch:auth:users:so_logstash_user:pass') }}" password = "{{ salt['pillar.get']('elasticsearch:auth:users:so_logstash_user:pass') }}"
{% endif %} {%- endif %}
{%- endif %} {%- endif %}
{# if grains.role in ['so-eval','so-standalone','so-manager', 'so-managersearch', 'so-heavynode'] -%} {# if grains.role in ['so-eval','so-standalone','so-manager', 'so-managersearch', 'so-heavynode'] -%}
@@ -692,13 +692,15 @@
servers = ["tcp://localhost:6379"] servers = ["tcp://localhost:6379"]
{%- endif #} {%- endif #}
{% if grains.role == 'so-node' %} {%- if grains.role in ['so-node', 'so-sensor', 'so-eval', 'so-manager', 'so-standalone', 'so-managersearch', 'so-heavynode'] %}
[[inputs.beat]] [[inputs.beat]]
url = "http://127.0.0.1:5066" url = "http://127.0.0.1:5066"
include = ["libbeat"] include = ["filebeat", "libbeat"]
{%- if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %}
username = "{{ salt['pillar.get']('elasticsearch:auth:users:so_beats_user:user') }}" username = "{{ salt['pillar.get']('elasticsearch:auth:users:so_beats_user:user') }}"
password = "{{ salt['pillar.get']('elasticsearch:auth:users:so_beats_user:pass') }}" password = "{{ salt['pillar.get']('elasticsearch:auth:users:so_beats_user:pass') }}"
{% endif %} {%- endif %}
{%- endif %}
# # Read metrics from one or more commands that can output to stdout # # Read metrics from one or more commands that can output to stdout
[[inputs.exec]] [[inputs.exec]]
@@ -709,7 +711,6 @@
timeout = "15s" timeout = "15s"
interval = "60s" interval = "60s"
# ## Commands array # ## Commands array
{% if grains['role'] in ['so-manager'] %} {% if grains['role'] in ['so-manager'] %}
[[inputs.exec]] [[inputs.exec]]