CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

enabled false by default, enabled via pillar in so-minion

Browse Source
This commit is contained in:
m0duspwnens
2023-05-08 13:43:53 -04:00
parent a2c444e03b
commit d5c7eec4ef
3 changed files with 25 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
salt/manager/tools/sbin/so-minion
View File

@@ -206,6 +206,7 @@ function add_sensor_to_minion() {
echo " interface: '$INTERFACE'" >> $PILLARFILE echo " interface: '$INTERFACE'" >> $PILLARFILE
echo " mtu: 9000" >> $PILLARFILE echo " mtu: 9000" >> $PILLARFILE
echo "zeek:" >> $PILLARFILE echo "zeek:" >> $PILLARFILE
echo " enabled: True" >> $PILLARFILE
echo " config:" >> $PILLARFILE echo " config:" >> $PILLARFILE
echo " node:" >> $PILLARFILE echo " node:" >> $PILLARFILE
echo " lb_procs: '$CORECOUNT'" >> $PILLARFILE echo " lb_procs: '$CORECOUNT'" >> $PILLARFILE
@@ -213,8 +214,17 @@ function add_sensor_to_minion() {
echo " config:" >> $PILLARFILE echo " config:" >> $PILLARFILE
echo " af-packet:" >> $PILLARFILE echo " af-packet:" >> $PILLARFILE
echo " threads: '$CORECOUNT'" >> $PILLARFILE echo " threads: '$CORECOUNT'" >> $PILLARFILE
# echo "pcap:" >> $PILLARFILE echo "pcap:" >> $PILLARFILE
# echo " enabled: True" >> $PILLARFILE echo " enabled: True" >> $PILLARFILE
echo " " >> $PILLARFILE
}
# Add basic host info to the minion file
function add_playbook_to_minion() {
printf '%s\n'\
"playbook:"\
" enabled: True"\
" " >> $PILLARFILE
} }
function create_fleet_policy() { function create_fleet_policy() {
@@ -293,11 +303,13 @@ function createHEAVYNODE() {
function createMANAGER() { function createMANAGER() {
add_elastic_to_minion add_elastic_to_minion
add_logstash_to_minion add_logstash_to_minion
add_playbook_to_minion
} }
function createMANAGERSEARCH() { function createMANAGERSEARCH() {
add_elastic_to_minion add_elastic_to_minion
add_logstash_to_minion add_logstash_to_minion
add_playbook_to_minion
} }
function createSENSOR() { function createSENSOR() {
@@ -315,6 +327,7 @@ function createSTANDALONE() {
add_elastic_to_minion add_elastic_to_minion
add_logstash_to_minion add_logstash_to_minion
add_sensor_to_minion add_sensor_to_minion
add_playbook_to_minion
} }
function testConnection() { function testConnection() {

2
salt/pcap/defaults.yaml
View File

@@ -1,5 +1,5 @@
pcap: pcap:
enabled: True enabled: False
config: config:
maxdirectoryfiles: 30000 maxdirectoryfiles: 30000
diskfreepercentage: 10 diskfreepercentage: 10

2
salt/zeek/defaults.yaml
View File

@@ -1,5 +1,5 @@
zeek: zeek:
enabled: True enabled: False
config: config:
node: node:
lb_procs: 0 lb_procs: 0