CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

elastalert settings

Browse Source
This commit is contained in:
Jason Ertel
2024-05-20 20:11:30 -04:00
parent 02b4d37c11
commit b7a4f20c61
3 changed files with 3 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/elastalert/files/predefined/jira_auth.yaml
View File

@@ -2,5 +2,5 @@
user: {{ elastalert.jira_user }} user: {{ elastalert.jira_user }}
password: {{ elastalert.jira_pass }} password: {{ elastalert.jira_pass }}
{% else %} {% else %}
apikey: {{ elastalert.get('jira_key', '') }} apikey: {{ elastalert.get('jira_api_key', '') }}
{% endif %} {% endif %}

9
salt/elastalert/soc_elastalert.yaml
View File

@@ -43,20 +43,13 @@ elastalert:
global: True global: True
helpLink: elastalert.html helpLink: elastalert.html
forcedType: string forcedType: string
opsgenie_key:
title: OpsGenie API Key
description: Optional configuration parameter for OpsGenie API Key. Requires a valid Security Onion license key.
global: True
sensitive: True
helpLink: elastalert.html
forcedType: string
files: files:
custom: custom:
filename__ext: filename__ext:
title: Custom Parameter File title: Custom Parameter File
description: Optional configuration file that can be used to specify custom file contents, such as a SMTP certificate file. When used, the corresponding parameter must be set to this setting's filename.ext path inside the custom subdirectory. For example, if specifying the SMTP cert file, the smtp_cert_file key must be set to /opt/elastalert/custom/smtp.crt in the Alerter Parameters setting for this certificate to be enabled, and assumes this duplicated setting has been named smtp__crt. Note that double underscores will be replaced with a period in the filename. description: Optional configuration file that can be used to specify custom file contents, such as a SMTP certificate file. When used, the corresponding parameter must be set to this setting's filename.ext path inside the custom subdirectory. For example, if specifying the SMTP cert file, the smtp_cert_file key must be set to /opt/elastalert/custom/smtp.crt in the Alerter Parameters setting for this certificate to be enabled, and assumes this duplicated setting has been named smtp__crt. Note that double underscores will be replaced with a period in the filename.
global: True global: True
duplicating: True duplicates: True
file: True file: True
helpLink: elastalert.html helpLink: elastalert.html
config: config: