CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update so-minion

Browse Source
This commit is contained in:
Mike Reeves
2024-03-06 09:51:56 -05:00
committed by GitHub
parent 5acefb5d18
commit f58c104d89
1 changed files with 7 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
salt/manager/tools/sbin/so-minion
View File

@@ -81,6 +81,8 @@ function getinstallinfo() {
function pcapspace() { function pcapspace() {
if [[ "$OPERATION" == "setup" ]]; then if [[ "$OPERATION" == "setup" ]]; then
# Use 25% for PCAP
PCAP_PERCENTAGE=1
local SPACESIZE=$(df -k /nsm | tail -1 | awk '{print $2}' | tr -d \n) local SPACESIZE=$(df -k /nsm | tail -1 | awk '{print $2}' | tr -d \n)
else else
@@ -96,10 +98,9 @@ function pcapspace() {
fi fi
local s=$(( $SPACESIZE / 1000000 )) local s=$(( $SPACESIZE / 1000000 ))
local s1=$(( $s / 4 )) local s1=$(( $s / 4 * $PCAP_PERCENTAGE ))
local s2=$(( $s1 / $CORECOUNT ))
MAXPCAPFILES=$s2 MAX_PCAP_SPACE=$s1
} }
@@ -271,17 +272,12 @@ function add_sensor_to_minion() {
echo " config:" >> $PILLARFILE echo " config:" >> $PILLARFILE
echo " af-packet:" >> $PILLARFILE echo " af-packet:" >> $PILLARFILE
echo " threads: '$CORECOUNT'" >> $PILLARFILE echo " threads: '$CORECOUNT'" >> $PILLARFILE
if [[ $is_pcaplimit ]]; then
echo " output:" >> $PILLARFILE
echo " pcap-log:" >> $PILLARFILE
echo " max-files: '$MAXPCAPFILES'" >> $PILLARFILE
fi
echo "pcap:" >> $PILLARFILE echo "pcap:" >> $PILLARFILE
echo " enabled: True" >> $PILLARFILE echo " enabled: True" >> $PILLARFILE
if [[ $is_pcaplimit ]]; then if [[ $is_pcaplimit ]]; then
echo " config:" >> $PILLARFILE echo " config:" >> $PILLARFILE
echo " diskfreepercentage: 75" >> $PILLARFILE echo " diskfreepercentage: 75" >> $PILLARFILE
pcapspace echo " suripcapmaxsize: $MAX_PCAP_SPACE" >> $PILLARFILE
fi fi
echo " " >> $PILLARFILE echo " " >> $PILLARFILE
} }
@@ -563,6 +559,7 @@ function createIDH() {
function createHEAVYNODE() { function createHEAVYNODE() {
is_pcaplimit=true is_pcaplimit=true
PCAP_PERCENTAGE=1
pcapspace pcapspace
add_elasticsearch_to_minion add_elasticsearch_to_minion
add_elastic_agent_to_minion add_elastic_agent_to_minion
@@ -575,6 +572,7 @@ function createHEAVYNODE() {
function createSENSOR() { function createSENSOR() {
is_pcaplimit=true is_pcaplimit=true
PCAP_PERCENTAGE=3
pcapspace pcapspace
add_sensor_to_minion add_sensor_to_minion
add_strelka_to_minion add_strelka_to_minion