Setup Script - Turn off wazuh and osq by default in eval mode

This commit is contained in:
Mike Reeves
2019-03-18 15:17:31 -04:00
parent 2c13b0c663
commit dfd25567e1

View File

@@ -1,4 +1,6 @@
{%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %} {%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %}
{%- set OSQUERY = salt['pillar.get']('master:osquery', '0') %}
{%- set WAZUH = salt['pillar.get']('master:wazuh', '0') %}
base: base:
'G@role:so-sensor': 'G@role:so-sensor':
- ca - ca
@@ -31,8 +33,12 @@ base:
- curator - curator
- elastalert - elastalert
- redis - redis
{%- if OSQUERY != '0' %}
- fleet - fleet
{%- endif %}
{%- if WAZUH != '0' %}
- wazuh - wazuh
{%- endif %}
- filebeat - filebeat
- utility - utility
- schedule - schedule