Merge pull request #11197 from Security-Onion-Solutions/feature/elastic_integration_apache

Add Apache package and templates

salt/elasticfleet/defaults.yaml

@@ -26,6 +26,7 @@ elasticfleet:
         - stderr
         - stdout
   packages:
+    - apache
     - auditd
     - aws
     - azure

salt/elasticsearch/defaults.yaml

@@ -286,6 +286,42 @@ elasticsearch:
         data_stream:
           hidden: false
           allow_custom_routing: false
+    so-logs-apache_x_access:
+      index_sorting: False
+      index_template:
+        index_patterns:
+          - "logs-apache.access-*"
+        template:
+          settings:
+            index:
+              number_of_replicas: 0
+        composed_of:
+          - "logs-apache.access@package"
+          - "logs-apache.access@custom"
+          - "so-fleet_globals-1"
+          - "so-fleet_agent_id_verification-1"
+        priority: 501
+        data_stream:
+          hidden: false
+          allow_custom_routing: false
+    so-logs-apache_x_error:
+      index_sorting: False
+      index_template:
+        index_patterns:
+          - "logs-apache.error-*"
+        template:
+          settings:
+            index:
+              number_of_replicas: 0
+        composed_of:
+          - "logs-apache.error@package"
+          - "logs-apache.error@custom"
+          - "so-fleet_globals-1"
+          - "so-fleet_agent_id_verification-1"
+        priority: 501
+        data_stream:
+          hidden: false
+          allow_custom_routing: false
     so-logs-auditd_x_log:
       index_sorting: False
       index_template:

salt/elasticsearch/soc_elasticsearch.yaml

@@ -201,6 +201,8 @@ elasticsearch:
     so-logs-windows_x_powershell: *indexSettings
     so-logs-windows_x_powershell_operational: *indexSettings
     so-logs-windows_x_sysmon_operational: *indexSettings
+    so-logs-apache_x_access: *indexSettings
+    so-logs-apache_x_error: *indexSettings
     so-logs-auditd_x_log: *indexSettings
     so-logs-aws_x_cloudtrail: *indexSettings
     so-logs-aws_x_cloudwatch_logs: *indexSettings