CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Adjust how manager pillar is populated for ENDGAME and default SOC config

Browse Source
This commit is contained in:
weslambert
2021-11-12 12:16:26 -05:00
committed by GitHub
parent 86a42addf0
commit df5901a65d
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
setup/so-functions
View File

@@ -1637,13 +1637,14 @@ manager_pillar() {
printf '%s\n'\ printf '%s\n'\
" kratoskey: '$KRATOSKEY'"\ " kratoskey: '$KRATOSKEY'"\
"" >> "$pillar_file" "" >> "$pillar_file"
if [[ -n $ENDGAMEHOST ]]; then
printf '%s\n'\ printf '%s\n'\
"soc:"\ "soc:"\
" endgamehost: '$ENDGAMEHOST'"\
" es_index_patterns: '*:so-*,*:endgame-*'"\ " es_index_patterns: '*:so-*,*:endgame-*'"\
"" >> "$pillar_file" "" >> "$pillar_file"
if [[ -n $ENDGAMEHOST ]]; then
printf '%s\n'\
" endgamehost: '$ENDGAMEHOST'"\
"" >> "$pillar_file"
fi fi
} }