CSEC_PUBLIC/securityonion
1
0 Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-11-03 11:08:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

Only enable curator on Manager in true cluster

Browse Source
This commit is contained in:
Mike Reeves committed 2021-08-31 15:51:34 -04:00
1 parent dc25ed2594
commit c12f380bc3
2 files changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

salt/curator/map.jinja
+2 -2
View File
@@ -4,10 +4,10 @@
{% do CURATOROPTIONS.update({'manage_sostatus': True}) %}
# don't start the docker container if curator is disabled via pillar
{% if not ENABLED or grains.id.split('_')|last == 'manager'%}
{% if not ENABLED or (TRUECLUSTER and grains.id.split('_')|last == 'searchnode') or (not TRUECLUSTER and grains.id.split('_')|last == 'manager') %}
{% do CURATOROPTIONS.update({'start': False}) %}
{% do CURATOROPTIONS.update({'status': 'absent'}) %}
{% if grains.id.split('_')|last == 'manager' %}
{% if (TRUECLUSTER and grains.id.split('_')|last == 'searchnode') or (not TRUECLUSTER and grains.id.split('_')|last == 'manager') %}
{% do CURATOROPTIONS.update({'manage_sostatus': False}) %}
{% endif %}
{% else %}
salt/top.sls
+1
View File
@@ -189,6 +189,7 @@ base:
{%- if KIBANA %}
- kibana
{%- endif %}
- curator
{%- if ELASTALERT %}
- elastalert
{%- endif %}