mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Hive Module - New Version
This commit is contained in:
@@ -56,7 +56,6 @@ so-thehive-es:
|
|||||||
- transport.tcp.port=9500
|
- transport.tcp.port=9500
|
||||||
- transport.host=0.0.0.0
|
- transport.host=0.0.0.0
|
||||||
- cluster.name=hive
|
- cluster.name=hive
|
||||||
- script.inline=true
|
|
||||||
- thread_pool.index.queue_size=100000
|
- thread_pool.index.queue_size=100000
|
||||||
- thread_pool.search.queue_size=100000
|
- thread_pool.search.queue_size=100000
|
||||||
- thread_pool.bulk.queue_size=100000
|
- thread_pool.bulk.queue_size=100000
|
||||||
@@ -98,8 +97,8 @@ so-thehive:
|
|||||||
- port_bindings:
|
- port_bindings:
|
||||||
- 0.0.0.0:9000:9000
|
- 0.0.0.0:9000:9000
|
||||||
|
|
||||||
#hivescript:
|
hivescript:
|
||||||
# cmd.script:
|
cmd.script:
|
||||||
# - source: salt://hive/thehive/scripts/hive_init.sh
|
- source: salt://hive/thehive/scripts/hive_init.sh
|
||||||
# - cwd: /opt/so
|
- cwd: /opt/so
|
||||||
# - template: jinja
|
- template: jinja
|
||||||
|
|||||||
@@ -5,59 +5,57 @@
|
|||||||
# WARNING: If you deploy your application on several servers, make sure to use the same key.
|
# WARNING: If you deploy your application on several servers, make sure to use the same key.
|
||||||
play.http.secret.key="letsdewdis"
|
play.http.secret.key="letsdewdis"
|
||||||
play.http.context=/thehive/
|
play.http.context=/thehive/
|
||||||
|
search.uri = "http://{{ MASTERIP }}:9400"
|
||||||
# Elasticsearch
|
# Elasticsearch
|
||||||
search {
|
search {
|
||||||
## Basic configuration
|
# Name of the index
|
||||||
# Index name.
|
index = the_hive
|
||||||
index = the_hive
|
# Name of the Elasticsearch cluster
|
||||||
# ElasticSearch cluster name.
|
cluster = hive
|
||||||
cluster = hive
|
# Address of the Elasticsearch instance
|
||||||
# ElasticSearch instance address.
|
host = ["{{ MASTERIP }}:9500"]
|
||||||
host = ["{{ MASTERIP }}:9500"]
|
#search.uri = "http://{{ MASTERIP }}:9500"
|
||||||
|
# Scroll keepalive
|
||||||
|
keepalive = 1m
|
||||||
|
# Size of the page for scroll
|
||||||
|
pagesize = 50
|
||||||
|
# Number of shards
|
||||||
|
nbshards = 5
|
||||||
|
# Number of replicas
|
||||||
|
nbreplicas = 1
|
||||||
|
# Arbitrary settings
|
||||||
|
settings {
|
||||||
|
# Maximum number of nested fields
|
||||||
|
mapping.nested_fields.limit = 100
|
||||||
|
}
|
||||||
|
|
||||||
## Advanced configuration
|
### XPack SSL configuration
|
||||||
# Scroll keepalive.
|
# Username for XPack authentication
|
||||||
#keepalive = 1m
|
#username
|
||||||
# Scroll page size.
|
# Password for XPack authentication
|
||||||
#pagesize = 50
|
#password
|
||||||
# Number of shards
|
# Enable SSL to connect to ElasticSearch
|
||||||
#nbshards = 5
|
ssl.enabled = false
|
||||||
# Number of replicas
|
# Path to certificate authority file
|
||||||
#nbreplicas = 1
|
#ssl.ca
|
||||||
# Arbitrary settings
|
# Path to certificate file
|
||||||
#settings {
|
#ssl.certificate
|
||||||
# # Maximum number of nested fields
|
# Path to key file
|
||||||
# mapping.nested_fields.limit = 100
|
#ssl.key
|
||||||
#}
|
|
||||||
|
|
||||||
### XPack SSL configuration
|
### SearchGuard configuration
|
||||||
# Username for XPack authentication
|
# Path to JKS file containing client certificate
|
||||||
#search.username = ""
|
#guard.keyStore.path
|
||||||
# Password for XPack authentication
|
# Password of the keystore
|
||||||
#search.password = ""
|
#guard.keyStore.password
|
||||||
# Enable SSL to connect to ElasticSearch
|
# Path to JKS file containing certificate authorities
|
||||||
search.ssl.enabled = false
|
#guard.trustStore.path
|
||||||
# Path to certificate authority file
|
## Password of the truststore
|
||||||
#search.ssl.ca = ""
|
#guard.trustStore.password
|
||||||
# Path to certificate file
|
# Enforce hostname verification
|
||||||
#search.ssl.certificate = ""
|
#guard.hostVerification
|
||||||
# Path to key file
|
# If hostname verification is enabled specify if hostname should be resolved
|
||||||
#search.ssl.key = ""
|
#guard.hostVerificationResolveHostname
|
||||||
|
|
||||||
### SearchGuard configuration
|
|
||||||
# Path to JKS file containing client certificate
|
|
||||||
#search.guard.keyStore.path = ""
|
|
||||||
# Password of the keystore
|
|
||||||
#search.guard.keyStore.password = ""
|
|
||||||
# Path to JKS file containing certificate authorities
|
|
||||||
#search.guard.trustStore.path = ""
|
|
||||||
## Password of the truststore
|
|
||||||
#search.guard.trustStore.password = ""
|
|
||||||
# Enforce hostname verification
|
|
||||||
#search.guard.hostVerification = false
|
|
||||||
# If hostname verification is enabled specify if hostname should be resolved
|
|
||||||
#search.guard.hostVerificationResolveHostname = false
|
|
||||||
}
|
}
|
||||||
|
|
||||||
# Authentication
|
# Authentication
|
||||||
|
|||||||
Reference in New Issue
Block a user