From f50639d2d2c6950492439ce110e78a160ee8af66 Mon Sep 17 00:00:00 2001 From: Wes Date: Tue, 7 Mar 2023 17:41:48 +0000 Subject: [PATCH] Fix import and syslog actions --- salt/curator/files/action/logs-import-so-delete.yml | 6 +++--- salt/curator/files/action/logs-syslog-so-delete.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/salt/curator/files/action/logs-import-so-delete.yml b/salt/curator/files/action/logs-import-so-delete.yml index 274d06711..b46a5fc73 100644 --- a/salt/curator/files/action/logs-import-so-delete.yml +++ b/salt/curator/files/action/logs-import-so-delete.yml @@ -3,19 +3,19 @@ # https://securityonion.net/license; you may not use this file except in compliance with the # Elastic License 2.0. -{%- set DELETE_DAYS = CURATORMERGED['logs-syslog-so'].delete %} +{%- set DELETE_DAYS = CURATORMERGED['logs-import-so'].delete %} actions: 1: action: delete_indices description: >- - Delete syslog indices when older than {{ DELETE_DAYS }} days. + Delete import indices when older than {{ DELETE_DAYS }} days. options: ignore_empty_list: True disable_action: False filters: - filtertype: pattern kind: regex - value: '^(.ds-logs-syslog-so.*)$' + value: '^(.ds-logs-import-so.*)$' - filtertype: age source: name direction: older diff --git a/salt/curator/files/action/logs-syslog-so-delete.yml b/salt/curator/files/action/logs-syslog-so-delete.yml index b46a5fc73..274d06711 100644 --- a/salt/curator/files/action/logs-syslog-so-delete.yml +++ b/salt/curator/files/action/logs-syslog-so-delete.yml @@ -3,19 +3,19 @@ # https://securityonion.net/license; you may not use this file except in compliance with the # Elastic License 2.0. -{%- set DELETE_DAYS = CURATORMERGED['logs-import-so'].delete %} +{%- set DELETE_DAYS = CURATORMERGED['logs-syslog-so'].delete %} actions: 1: action: delete_indices description: >- - Delete import indices when older than {{ DELETE_DAYS }} days. + Delete syslog indices when older than {{ DELETE_DAYS }} days. options: ignore_empty_list: True disable_action: False filters: - filtertype: pattern kind: regex - value: '^(.ds-logs-import-so.*)$' + value: '^(.ds-logs-syslog-so.*)$' - filtertype: age source: name direction: older