CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

use curator defaults.yaml merged with pillar for actions

Browse Source
This commit is contained in:
m0duspwnens
2022-10-21 10:38:32 -04:00
parent 998870ac87
commit c880be8d45
138 changed files with 145 additions and 138 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/curator/files/action/so-aws-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-aws:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-aws.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-aws-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-aws.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-aws-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-aws.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-azure-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-azure:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-azure.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-azure-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-azure:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-azure.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-azure-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-azure:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-azure.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-barracuda-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-barracuda:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-barracuda.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-barracuda-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-barracuda:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-barracuda.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-barracuda-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-barracuda:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-barracuda.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-beats-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-beats:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-beats.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-beats-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-beats:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-beats.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-beats-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-beats:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-beats.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-bluecoat-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-bluecoat:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-bluecoat.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-bluecoat-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-bluecoat:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-bluecoat.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-bluecoat-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-bluecoat:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-bluecoat.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-cef-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-cef:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-cef.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-cef-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cef:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cef.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-cef-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cef:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cef.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-checkpoint-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-checkpoint:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-checkpoint.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-checkpoint-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-checkpoint:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-checkpoint.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-checkpoint-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-checkpoint:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-checkpoint.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-cisco-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-cisco:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-cisco.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-cisco-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cisco:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cisco.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-cisco-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cisco:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cisco.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-cyberark-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-cyberark:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-cyberark.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-cyberark-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cyberark:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cyberark.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-cyberark-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cyberark:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cyberark.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-cylance-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-cylance:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-cylance.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-cylance-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cylance:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cylance.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-cylance-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cylance:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-cylance.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-elasticsearch-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-elasticsearch:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-elasticsearch.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-elasticsearch-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-elasticsearch:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-elasticsearch.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-elasticsearch-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-elasticsearch:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-elasticsearch.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-endgame-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-endgame:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-endgame.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-endgame-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-endgame:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-endgame.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-endgame-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-endgame:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-endgame.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-f5-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-f5:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-f5.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-f5-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-f5:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-f5.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-f5-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-f5:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-f5.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-firewall-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-firewall:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-firewall.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-firewall-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-firewall:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-firewall.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-firewall-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-firewall:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-firewall.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-fortinet-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-fortinet:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-fortinet.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-fortinet-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-fortinet:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-fortinet.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-fortinet-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-fortinet:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-fortinet.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-gcp-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-gcp:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-gcp.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-gcp-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-gcp:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-gcp.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-gcp-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-gcp:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-gcp.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-google_workspace-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-google_workspace:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-google_workspace.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-google_workspace-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-google_workspace:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-google_workspace.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-google_workspace-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-google_workspace:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-google_workspace.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-ids-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-ids:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-ids.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-ids-delete.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-ids:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-ids.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-ids-warm.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-ids:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-ids.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-imperva-close.yml
View File

@@ -4,7 +4,7 @@
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-imperva:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-imperva.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-imperva-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-imperva:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-imperva.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-imperva-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-imperva:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-imperva.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-import-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-import:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-import.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-import-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-import:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-import.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-import-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-import:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-import.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-infoblox-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-infoblox:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-infoblox.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-infoblox-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-infoblox:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-infoblox.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-infoblox-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-infoblox:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-infoblox.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-juniper-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-juniper:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-juniper.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-juniper-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-juniper:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-juniper.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-juniper-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-aws.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-kibana-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-kibana:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-kibana.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-kibana-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-kibana:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-kibana.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-kibana-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-kibana:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-kibana.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-kratos-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-kratos:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-kratos.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-kratos-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-kratos:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-kratos.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-kratos-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-kratos:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-kratos.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-logstash-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-logstash:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-logstash.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-logstash-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-logstash:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-logstash.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-logstash-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-logstash:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-logstash.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-microsoft-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-microsoft:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-microsoft.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-microsoft-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-microsoft:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-microsoft.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-microsoft-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-microsoft:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-microsoft.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-misp-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-misp:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-misp.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-misp-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-misp:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-misp.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-misp-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-misp:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-misp.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-netflow-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-netflow:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-netflow.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-netflow-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-netflow:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-netflow.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-netflow-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-netflow:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-netflow.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-netscout-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-netscout:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-netscout.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-netscout-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-netscout:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-netscout.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-netscout-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-netscout:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-netscout.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-o365-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-o365:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-o365.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-o365-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-o365:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-o365.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-o365-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-o365:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-o365.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-okta-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-okta:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-okta.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-okta-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-okta:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-okta.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-okta.delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-okta:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-okta.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-osquery-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-osquery:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-osquery.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-osquery-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-osquery:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-osquery.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-osquery-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-osquery:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-osquery.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-ossec-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-ossec:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-ossec.close -%}
actions:
1:
action: close

2
salt/curator/files/action/so-ossec-delete.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set DELETE_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-ossec:delete') -%}
{%- set DELETE_DAYS = CURATORMERGED.elasticsearch.index_settings.so-ossec.delete -%}
actions:
1:
action: delete_indices

2
salt/curator/files/action/so-ossec-warm.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-ossec:warm') -%}
{%- set WARM_DAYS = CURATORMERGED.elasticsearch.index_settings.so-ossec.warm -%}
actions:
1:
action: allocation

2
salt/curator/files/action/so-proofpoint-close.yml
View File

@@ -3,7 +3,7 @@
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.
{%- set cur_close_days = salt['pillar.get']('elasticsearch:index_settings:so-proofpoint:close') -%}
{%- set cur_close_days = CURATORMERGED.elasticsearch.index_settings.so-proofpoint.close -%}
actions:
1:
action: close

Some files were not shown because too many files have changed in this diff Show More