mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Setup Script - Turn off wazuh and osq by default in eval mode
This commit is contained in:
@@ -1,4 +1,6 @@
|
|||||||
{%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %}
|
{%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %}
|
||||||
|
{%- set OSQUERY = salt['pillar.get']('master:osquery', '0') %}
|
||||||
|
{%- set WAZUH = salt['pillar.get']('master:wazuh', '0') %}
|
||||||
base:
|
base:
|
||||||
'G@role:so-sensor':
|
'G@role:so-sensor':
|
||||||
- ca
|
- ca
|
||||||
@@ -31,8 +33,12 @@ base:
|
|||||||
- curator
|
- curator
|
||||||
- elastalert
|
- elastalert
|
||||||
- redis
|
- redis
|
||||||
|
{%- if OSQUERY != '0' %}
|
||||||
- fleet
|
- fleet
|
||||||
|
{%- endif %}
|
||||||
|
{%- if WAZUH != '0' %}
|
||||||
- wazuh
|
- wazuh
|
||||||
|
{%- endif %}
|
||||||
- filebeat
|
- filebeat
|
||||||
- utility
|
- utility
|
||||||
- schedule
|
- schedule
|
||||||
|
|||||||
Reference in New Issue
Block a user