Hive Module - New Version

This commit is contained in:
Mike Reeves
2019-09-25 13:16:49 -04:00
parent f69a5212ff
commit d979be82fb
2 changed files with 52 additions and 55 deletions

View File

@@ -56,7 +56,6 @@ so-thehive-es:
- transport.tcp.port=9500 - transport.tcp.port=9500
- transport.host=0.0.0.0 - transport.host=0.0.0.0
- cluster.name=hive - cluster.name=hive
- script.inline=true
- thread_pool.index.queue_size=100000 - thread_pool.index.queue_size=100000
- thread_pool.search.queue_size=100000 - thread_pool.search.queue_size=100000
- thread_pool.bulk.queue_size=100000 - thread_pool.bulk.queue_size=100000
@@ -98,8 +97,8 @@ so-thehive:
- port_bindings: - port_bindings:
- 0.0.0.0:9000:9000 - 0.0.0.0:9000:9000
#hivescript: hivescript:
# cmd.script: cmd.script:
# - source: salt://hive/thehive/scripts/hive_init.sh - source: salt://hive/thehive/scripts/hive_init.sh
# - cwd: /opt/so - cwd: /opt/so
# - template: jinja - template: jinja

View File

@@ -5,59 +5,57 @@
# WARNING: If you deploy your application on several servers, make sure to use the same key. # WARNING: If you deploy your application on several servers, make sure to use the same key.
play.http.secret.key="letsdewdis" play.http.secret.key="letsdewdis"
play.http.context=/thehive/ play.http.context=/thehive/
search.uri = "http://{{ MASTERIP }}:9400"
# Elasticsearch # Elasticsearch
search { search {
## Basic configuration # Name of the index
# Index name. index = the_hive
index = the_hive # Name of the Elasticsearch cluster
# ElasticSearch cluster name. cluster = hive
cluster = hive # Address of the Elasticsearch instance
# ElasticSearch instance address. host = ["{{ MASTERIP }}:9500"]
host = ["{{ MASTERIP }}:9500"] #search.uri = "http://{{ MASTERIP }}:9500"
# Scroll keepalive
keepalive = 1m
# Size of the page for scroll
pagesize = 50
# Number of shards
nbshards = 5
# Number of replicas
nbreplicas = 1
# Arbitrary settings
settings {
# Maximum number of nested fields
mapping.nested_fields.limit = 100
}
## Advanced configuration ### XPack SSL configuration
# Scroll keepalive. # Username for XPack authentication
#keepalive = 1m #username
# Scroll page size. # Password for XPack authentication
#pagesize = 50 #password
# Number of shards # Enable SSL to connect to ElasticSearch
#nbshards = 5 ssl.enabled = false
# Number of replicas # Path to certificate authority file
#nbreplicas = 1 #ssl.ca
# Arbitrary settings # Path to certificate file
#settings { #ssl.certificate
# # Maximum number of nested fields # Path to key file
# mapping.nested_fields.limit = 100 #ssl.key
#}
### XPack SSL configuration ### SearchGuard configuration
# Username for XPack authentication # Path to JKS file containing client certificate
#search.username = "" #guard.keyStore.path
# Password for XPack authentication # Password of the keystore
#search.password = "" #guard.keyStore.password
# Enable SSL to connect to ElasticSearch # Path to JKS file containing certificate authorities
search.ssl.enabled = false #guard.trustStore.path
# Path to certificate authority file ## Password of the truststore
#search.ssl.ca = "" #guard.trustStore.password
# Path to certificate file # Enforce hostname verification
#search.ssl.certificate = "" #guard.hostVerification
# Path to key file # If hostname verification is enabled specify if hostname should be resolved
#search.ssl.key = "" #guard.hostVerificationResolveHostname
### SearchGuard configuration
# Path to JKS file containing client certificate
#search.guard.keyStore.path = ""
# Password of the keystore
#search.guard.keyStore.password = ""
# Path to JKS file containing certificate authorities
#search.guard.trustStore.path = ""
## Password of the truststore
#search.guard.trustStore.password = ""
# Enforce hostname verification
#search.guard.hostVerification = false
# If hostname verification is enabled specify if hostname should be resolved
#search.guard.hostVerificationResolveHostname = false
} }
# Authentication # Authentication