From ed116cf850bcbfaffcfd4b1aa04e96828781c5ad Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Tue, 31 Aug 2021 15:09:26 -0400
Subject: [PATCH] Add Actions for warm indices

---
 salt/curator/files/action/so-cyberark-warm.yml  | 4 ++--
 salt/curator/files/action/so-firewall-warm.yml  | 4 ++--
 salt/curator/files/action/so-fortinet-warm.yml  | 4 ++--
 salt/curator/files/action/so-netscout-warm.yml  | 4 ++--
 salt/curator/files/action/so-sonicwall-warm.yml | 4 ++--
 salt/curator/files/action/so-syslog-warm.yml    | 4 ++--
 salt/curator/files/action/so-zeek-warm.yml      | 4 ++--
 7 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/salt/curator/files/action/so-cyberark-warm.yml b/salt/curator/files/action/so-cyberark-warm.yml
index 5369ed9a9..8eae0b542 100644
--- a/salt/curator/files/action/so-cyberark-warm.yml
+++ b/salt/curator/files/action/so-cyberark-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-cyberark:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-cyberark
     - filtertype: age
       source: name
       direction: older
diff --git a/salt/curator/files/action/so-firewall-warm.yml b/salt/curator/files/action/so-firewall-warm.yml
index 5369ed9a9..2e9643dc3 100644
--- a/salt/curator/files/action/so-firewall-warm.yml
+++ b/salt/curator/files/action/so-firewall-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-firewall:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-firewall
     - filtertype: age
       source: name
       direction: older
diff --git a/salt/curator/files/action/so-fortinet-warm.yml b/salt/curator/files/action/so-fortinet-warm.yml
index 5369ed9a9..db9a6f2db 100644
--- a/salt/curator/files/action/so-fortinet-warm.yml
+++ b/salt/curator/files/action/so-fortinet-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-fortinet:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-fortinet
     - filtertype: age
       source: name
       direction: older
diff --git a/salt/curator/files/action/so-netscout-warm.yml b/salt/curator/files/action/so-netscout-warm.yml
index 5369ed9a9..1b93c3118 100644
--- a/salt/curator/files/action/so-netscout-warm.yml
+++ b/salt/curator/files/action/so-netscout-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-netscout:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-netscout
     - filtertype: age
       source: name
       direction: older
diff --git a/salt/curator/files/action/so-sonicwall-warm.yml b/salt/curator/files/action/so-sonicwall-warm.yml
index 5369ed9a9..fa8ceb3e4 100644
--- a/salt/curator/files/action/so-sonicwall-warm.yml
+++ b/salt/curator/files/action/so-sonicwall-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-sonicwall:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-sonicwall
     - filtertype: age
       source: name
       direction: older
diff --git a/salt/curator/files/action/so-syslog-warm.yml b/salt/curator/files/action/so-syslog-warm.yml
index 5369ed9a9..e5ebb2fa6 100644
--- a/salt/curator/files/action/so-syslog-warm.yml
+++ b/salt/curator/files/action/so-syslog-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-syslog:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-syslog
     - filtertype: age
       source: name
       direction: older
diff --git a/salt/curator/files/action/so-zeek-warm.yml b/salt/curator/files/action/so-zeek-warm.yml
index 5369ed9a9..2b4b6a729 100644
--- a/salt/curator/files/action/so-zeek-warm.yml
+++ b/salt/curator/files/action/so-zeek-warm.yml
@@ -1,4 +1,4 @@
-{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-aws:warm', 7) -%}
+{%- set WARM_DAYS = salt['pillar.get']('elasticsearch:index_settings:so-zeek:warm', 7) -%}
 actions:
   1:
     action: allocation
@@ -14,7 +14,7 @@ actions:
     filters:
     - filtertype: pattern
       kind: prefix
-      value: so-aws
+      value: so-zeek
     - filtertype: age
       source: name
       direction: older