Update filecheck.yaml

This commit is contained in:
Mike Reeves
2022-10-31 13:41:45 -04:00
committed by GitHub
parent 4c5a2c0610
commit d2eb61a830

View File

@@ -1,10 +1,10 @@
{%- set ENGINE = salt['pillar.get']('global:mdengine', '') %} {%- set ENGINE = salt['pillar.get']('global:mdengine', '') -%}
filecheck: filecheck:
{% if ENGINE == "SURICATA" %} {%- if ENGINE == "SURICATA" -%}
extract_path = '/nsm/suricata/extracted' extract_path = '/nsm/suricata/extracted'
{% else %} {%- else -%}
extract_path = '/nsm/zeek/extracted/complete' extract_path = '/nsm/zeek/extracted/complete'
{% endif %} {%- endif -%}
historypath = '/nsm/strelka/history/' historypath = '/nsm/strelka/history/'
strelkapath = '/nsm/strelka/unprocessed/' strelkapath = '/nsm/strelka/unprocessed/'
logfile = '/opt/so/log/strelka/filecheck.log' logfile = '/opt/so/log/strelka/filecheck.log'