From b8e8510dd20e37873ed31fd658f36d085867756e Mon Sep 17 00:00:00 2001 From: m0duspwnens Date: Fri, 11 Dec 2020 14:26:32 -0500 Subject: [PATCH] merge pillar with the defaults https://github.com/Security-Onion-Solutions/securityonion/issues/2319 --- salt/zeek/policy/securityonion/file-extraction/extract.zeek | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/salt/zeek/policy/securityonion/file-extraction/extract.zeek b/salt/zeek/policy/securityonion/file-extraction/extract.zeek index 6f59ed447..e23c44a92 100644 --- a/salt/zeek/policy/securityonion/file-extraction/extract.zeek +++ b/salt/zeek/policy/securityonion/file-extraction/extract.zeek @@ -1,4 +1,5 @@ -{%- import_yaml "zeek/fileextraction_defaults.yaml" as zeek with context %} +{%- import_yaml "zeek/fileextraction_defaults.yaml" as zeek_default %} +{%- set zeek = salt['grains.filter_by'](zeek_default, default='zeek', merge=salt['pillar.get']('zeek', {})) %} # Directory to stage Zeek extracted files before processing redef FileExtract::prefix = "/nsm/zeek/extracted/"; # Set a limit to the file size