CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

PCAP module - fix dir

Browse Source
This commit is contained in:
Mike Reeves
2019-06-19 22:10:09 -04:00
parent ecd75d121b
commit b6fd6fa2cc
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/logstash/conf/conf.enabled.txt.so-master
View File

@@ -12,7 +12,7 @@
/usr/share/logstash/pipeline.so/0002_input_windows_json.conf /usr/share/logstash/pipeline.so/0002_input_windows_json.conf
/usr/share/logstash/pipeline.so/0003_input_syslog.conf /usr/share/logstash/pipeline.so/0003_input_syslog.conf
/usr/share/logstash/pipeline.so/0005_input_suricata.conf /usr/share/logstash/pipeline.so/0005_input_suricata.conf
/usr/share/logstash/pipeline.dynamic/0006_input_beats.conf #/usr/share/logstash/pipeline.dynamic/0006_input_beats.conf
/usr/share/logstash/pipeline.dynamic/0010_input_hhbeats.conf /usr/share/logstash/pipeline.dynamic/0010_input_hhbeats.conf
/usr/share/logstash/pipeline.so/0007_input_import.conf /usr/share/logstash/pipeline.so/0007_input_import.conf
/usr/share/logstash/pipeline.dynamic/9999_output_redis.conf /usr/share/logstash/pipeline.dynamic/9999_output_redis.conf

3
salt/pcap/files/sensoroni.json
View File

@@ -2,6 +2,7 @@
{%- set SENSORONIKEY = salt['pillar.get']('static:sensoronikey', '') -%} {%- set SENSORONIKEY = salt['pillar.get']('static:sensoronikey', '') -%}
{ {
"logFilename": "/opt/sensoroni/log/sensoroni.log", "logFilename": "/opt/sensoroni/log/sensoroni.log",
"logLevel":"debug",
"agent": { "agent": {
"pollIntervalMs": 10000, "pollIntervalMs": 10000,
"serverUrl": "https://{{ MASTER }}/sensoroniagents", "serverUrl": "https://{{ MASTER }}/sensoroniagents",
@@ -12,7 +13,7 @@
}, },
"stenoquery": { "stenoquery": {
"pcapInputPath": "/nsm/pcap", "pcapInputPath": "/nsm/pcap",
"pcapOutputPath": "/nsm/pcapoutput" "pcapOutputPath": "/nsm/pcapout"
} }
} }
} }