mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
The Hive Module - Initial Skeleton
This commit is contained in:
46
salt/hive/init.sls
Normal file
46
salt/hive/init.sls
Normal file
@@ -0,0 +1,46 @@
|
|||||||
|
# Install Elasticsearch
|
||||||
|
|
||||||
|
# Made directory for ES data to live in
|
||||||
|
hiveesdata:
|
||||||
|
file.directory:
|
||||||
|
- name: /nsm/hive/esdata
|
||||||
|
- makedirs: True
|
||||||
|
|
||||||
|
so-thehive-es:
|
||||||
|
docker_container.running:
|
||||||
|
- image: docker.elastic.co/elasticsearch/elasticsearch:5.6.0
|
||||||
|
- hostname: so-thehive-es
|
||||||
|
- name: so-thehive-es
|
||||||
|
- interactive: True
|
||||||
|
- tty: True
|
||||||
|
- binds:
|
||||||
|
- /nsm/hive/esdata:/usr/share/elasticsearch/data:rw
|
||||||
|
- environment:
|
||||||
|
- http.host=0.0.0.0
|
||||||
|
- transport.host=0.0.0.0
|
||||||
|
- xpack.security.enabled=false
|
||||||
|
- cluster.name=hive
|
||||||
|
- script.inline=true
|
||||||
|
- thread_pool.index.queue_size=100000
|
||||||
|
- thread_pool.search.queue_size=100000
|
||||||
|
- thread_pool.bulk.queue_size=100000
|
||||||
|
|
||||||
|
# Install Cortex
|
||||||
|
|
||||||
|
so-cortex:
|
||||||
|
docker_container_running:
|
||||||
|
- image: thehiveproject/cortex:latest
|
||||||
|
- hostname: so-cortex
|
||||||
|
- name: so-cortex
|
||||||
|
|
||||||
|
# Install Hive
|
||||||
|
hiveconfdir:
|
||||||
|
file.directory:
|
||||||
|
- name: /opt/so/conf/hive/etc
|
||||||
|
- makedirs: True
|
||||||
|
|
||||||
|
so-thehive:
|
||||||
|
docker_container_running:
|
||||||
|
- image: thehiveproject/thehive:latest
|
||||||
|
- hostname: so-thehive
|
||||||
|
- name: so-thehive
|
||||||
Reference in New Issue
Block a user