pillarize local.zeek and move zeekctl from defaults.yml to zeek pillar - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/585

2026-05-05 02:48:21 +02:00 · 2020-04-28 09:44:37 -04:00
parent 90aabde4c9
commit b6741daca6
7 changed files with 75 additions and 152 deletions
@@ -3,6 +3,10 @@ base:
    - patch.needs_restarting
    - docker.config

+  '*_eval or *_helix or *_heavynode or *_sensor':
+    - match: compound
+    - zeek
+
  '*_mastersearch or *_heavynode':
    - match: compound
    - logstash