mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Setup Script - Turn off wazuh and osq by default in eval mode
This commit is contained in:
@@ -1,4 +1,6 @@
|
||||
{%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %}
|
||||
{%- set OSQUERY = salt['pillar.get']('master:osquery', '0') %}
|
||||
{%- set WAZUH = salt['pillar.get']('master:wazuh', '0') %}
|
||||
base:
|
||||
'G@role:so-sensor':
|
||||
- ca
|
||||
@@ -31,8 +33,12 @@ base:
|
||||
- curator
|
||||
- elastalert
|
||||
- redis
|
||||
{%- if OSQUERY != '0' %}
|
||||
- fleet
|
||||
{%- endif %}
|
||||
{%- if WAZUH != '0' %}
|
||||
- wazuh
|
||||
{%- endif %}
|
||||
- filebeat
|
||||
- utility
|
||||
- schedule
|
||||
|
||||
Reference in New Issue
Block a user