From cf0164a55b761d25e11d4d8630a93a46259e9d8f Mon Sep 17 00:00:00 2001
From: Josh Brower <josh@defensivedepth.com>
Date: Thu, 7 Nov 2019 15:40:54 -0500
Subject: [PATCH] SOCtopus - move logging outside container

---
 salt/soctopus/init.sls | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/salt/soctopus/init.sls b/salt/soctopus/init.sls
index ebfbe3224..a5c72e362 100644
--- a/salt/soctopus/init.sls
+++ b/salt/soctopus/init.sls
@@ -12,6 +12,12 @@ soctopussync:
     - user: 939
     - group: 939
     - template: jinja
+ 
+soctopuslogdir:
+  file.directory:
+    - name: /opt/so/log/soctopus
+    - user: 939
+    - group: 939
 
 playbookrulesdir:
   file.directory:
@@ -51,6 +57,7 @@ so-soctopus:
     - name: so-soctopus
     - binds:
       - /opt/so/conf/soctopus/SOCtopus.conf:/SOCtopus/SOCtopus.conf:ro
+      - /opt/so/log/soctopus/:/var/log/SOCtopus/:rw      
       - /opt/so/rules/elastalert/playbook:/etc/playbook-rules:rw
       - /opt/so/conf/playbook/nav_layer_playbook.json:/etc/playbook/nav_layer_playbook.json:rw
     - port_bindings: