CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-25 14:07:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add Grafana annotation

Browse Source
This commit is contained in:
Mike Reeves
2022-09-13 13:56:37 -04:00
parent b38f0fa996
commit de047cea8e
3 changed files with 61 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/elastalert/soc_elastalert.yaml
+10 -1
View File
@@ -2,24 +2,33 @@ elastalert:
config:
disable_rules_on_error:
description: Disable rules on failure.
run_every:
global: True
run_every:
minutes:
description: Amount of time in minutes between searches.
global: True
buffer_time:
minutes:
description: Amount of time in minutes to look through.
global: True
old_query_limit:
minutes:
description: Amount of time in minutes between queries to start at the most recently run query.
global: True
es_conn_timeout:
description: Timeout in seconds for connecting to and reading from Elasticsearch.
global: True
max_query_size:
description: The maximum number of documents that will be downloaded from Elasticsearch in a single query.
global: True
alert_time_limit:
days:
description: The retry window for failed alerts.
global: True
index_settings:
shards:
description: The amount of shards to use for elastalert.
global: True
replicas:
description: The amount of replicas for the Elastalert index.
global: True