From d004263b71179c323b95421734b7b71fbc24e5db Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 2 Dec 2020 14:33:22 -0500
Subject: [PATCH] Add Elastic Clustering

---
 pillar/top.sls                             |  1 +
 salt/elasticsearch/files/elasticsearch.yml | 10 +++++++++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/pillar/top.sls b/pillar/top.sls
index 77db6fe60..627fed80b 100644
--- a/pillar/top.sls
+++ b/pillar/top.sls
@@ -82,6 +82,7 @@ base:
     - elasticsearch.search
     - global
     - minions.{{ grains.id }}
+    - data.nodestab
 
   '*_import':
     - zeeklogs
diff --git a/salt/elasticsearch/files/elasticsearch.yml b/salt/elasticsearch/files/elasticsearch.yml
index b5d0b0293..a7a6ad34a 100644
--- a/salt/elasticsearch/files/elasticsearch.yml
+++ b/salt/elasticsearch/files/elasticsearch.yml
@@ -43,6 +43,14 @@ node.name: {{ grains.host }}
 script.max_compilations_rate: 1000/1m
 {%- if TRUECLUSTER is sameas true %}
   {%- if grains.role == 'so-manager' %}
-node.roles: [ master ]
+    {%- if salt['pillar.get']('nodestab', {}) %}
+node.roles: [ master, remote_cluster_client ]
+    {%- endif %}
+  {%- else %}
+node.roles: [ data, ingest, ml ] 
   {%- endif %}
+discovery.seed_hosts:
+   - {{ grains.master }}
+cluster.initial_master_nodes: 
+   - {{ grains.master }}
 {%- endif %}