mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
HH Alpha Initial Push
This commit is contained in:
@@ -92,13 +92,13 @@ eslogdir:
|
|||||||
|
|
||||||
so-elasticsearchimage:
|
so-elasticsearchimage:
|
||||||
cmd.run:
|
cmd.run:
|
||||||
- name: docker pull --disable-content-trust=false soshybridhunter/so-elasticsearch:HH1.0.6
|
- name: docker pull --disable-content-trust=false soshybridhunter/so-elasticsearch:HH1.1.0
|
||||||
|
|
||||||
so-elasticsearch:
|
so-elasticsearch:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- require:
|
- require:
|
||||||
- so-elasticsearchimage
|
- so-elasticsearchimage
|
||||||
- image: soshybridhunter/so-elasticsearch:HH1.0.6
|
- image: soshybridhunter/so-elasticsearch:HH1.1.0
|
||||||
- hostname: elasticsearch
|
- hostname: elasticsearch
|
||||||
- name: so-elasticsearch
|
- name: so-elasticsearch
|
||||||
- user: elasticsearch
|
- user: elasticsearch
|
||||||
|
|||||||
@@ -51,13 +51,13 @@ filebeatconfsync:
|
|||||||
|
|
||||||
so-filebeatimage:
|
so-filebeatimage:
|
||||||
cmd.run:
|
cmd.run:
|
||||||
- name: docker pull --disable-content-trust=false soshybridhunter/so-filebeat:HH1.0.6
|
- name: docker pull --disable-content-trust=false soshybridhunter/so-filebeat:HH1.1.0
|
||||||
|
|
||||||
so-filebeat:
|
so-filebeat:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- require:
|
- require:
|
||||||
- so-filebeatimage
|
- so-filebeatimage
|
||||||
- image: soshybridhunter/so-filebeat:HH1.0.6
|
- image: soshybridhunter/so-filebeat:HH1.1.0
|
||||||
- hostname: so-filebeat
|
- hostname: so-filebeat
|
||||||
- user: root
|
- user: root
|
||||||
- extra_hosts: {{ MASTER }}:{{ MASTERIP }}
|
- extra_hosts: {{ MASTER }}:{{ MASTERIP }}
|
||||||
|
|||||||
@@ -56,14 +56,14 @@ synckibanacustom:
|
|||||||
|
|
||||||
so-kibanaimage:
|
so-kibanaimage:
|
||||||
cmd.run:
|
cmd.run:
|
||||||
- name: docker pull --disable-content-trust=false soshybridhunter/so-kibana:HH1.0.7
|
- name: docker pull --disable-content-trust=false soshybridhunter/so-kibana:HH1.1.0
|
||||||
|
|
||||||
# Start the kibana docker
|
# Start the kibana docker
|
||||||
so-kibana:
|
so-kibana:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- require:
|
- require:
|
||||||
- so-kibanaimage
|
- so-kibanaimage
|
||||||
- image: soshybridhunter/so-kibana:HH1.0.7
|
- image: soshybridhunter/so-kibana:HH1.1.0
|
||||||
- hostname: kibana
|
- hostname: kibana
|
||||||
- user: kibana
|
- user: kibana
|
||||||
- environment:
|
- environment:
|
||||||
|
|||||||
@@ -148,13 +148,13 @@ lslogdir:
|
|||||||
# Add the container
|
# Add the container
|
||||||
so-logstashimage:
|
so-logstashimage:
|
||||||
cmd.run:
|
cmd.run:
|
||||||
- name: docker pull --disable-content-trust=false soshybridhunter/so-logstash:HH1.0.6
|
- name: docker pull --disable-content-trust=false soshybridhunter/so-logstash:HH1.1.0
|
||||||
|
|
||||||
so-logstash:
|
so-logstash:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- require:
|
- require:
|
||||||
- so-logstashimage
|
- so-logstashimage
|
||||||
- image: soshybridhunter/so-logstash:HH1.0.6
|
- image: soshybridhunter/so-logstash:HH1.1.0
|
||||||
- hostname: so-logstash
|
- hostname: so-logstash
|
||||||
- name: so-logstash
|
- name: so-logstash
|
||||||
- user: logstash
|
- user: logstash
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
{%- set MASTERIP = salt['pillar.get']('static:masterip', '') -%}
|
{%- set MASTERIP = salt['pillar.get']('static:masterip', '') -%}
|
||||||
{%- set SENSORONIKEY = salt['pillar.get']('static:sensoronikey', '') -%}
|
{%- set SENSORONIKEY = salt['pillar.get']('static:sensoronikey', '') -%}
|
||||||
{
|
{
|
||||||
"logFilename": "sensoroni.log",
|
"logFilename": "log/sensoroni.log",
|
||||||
"agent": {
|
"agent": {
|
||||||
"pollIntervalMs": 10000,
|
"pollIntervalMs": 10000,
|
||||||
"serverUrl": "https://{{ MASTERIP }}/sensoroniagents",
|
"serverUrl": "https://{{ MASTERIP }}/sensoroniagents",
|
||||||
@@ -44,6 +44,15 @@ stenoconf:
|
|||||||
- mode: 644
|
- mode: 644
|
||||||
- template: jinja
|
- template: jinja
|
||||||
|
|
||||||
|
sensoroniagentconf:
|
||||||
|
file.managed:
|
||||||
|
- name: /opt/so/conf/steno/sensoroni.json
|
||||||
|
- source: salt://pcap/files/sensoroni.json
|
||||||
|
- user: root
|
||||||
|
- group: root
|
||||||
|
- mode: 644
|
||||||
|
- template: jinja
|
||||||
|
|
||||||
stenoca:
|
stenoca:
|
||||||
file.directory:
|
file.directory:
|
||||||
- name: /opt/so/conf/steno/certs
|
- name: /opt/so/conf/steno/certs
|
||||||
@@ -87,13 +96,13 @@ stenolog:
|
|||||||
|
|
||||||
so-stenoimage:
|
so-stenoimage:
|
||||||
cmd.run:
|
cmd.run:
|
||||||
- name: docker pull --disable-content-trust=false soshybridhunter/so-steno:HH1.0.3
|
- name: docker pull --disable-content-trust=false soshybridhunter/so-steno:HH1.1.0
|
||||||
|
|
||||||
so-steno:
|
so-steno:
|
||||||
docker_container.running:
|
docker_container.running:
|
||||||
- require:
|
- require:
|
||||||
- so-stenoimage
|
- so-stenoimage
|
||||||
- image: soshybridhunter/so-steno:HH1.0.3
|
- image: soshybridhunter/so-steno:HH1.1.0
|
||||||
- network_mode: host
|
- network_mode: host
|
||||||
- privileged: True
|
- privileged: True
|
||||||
- port_bindings:
|
- port_bindings:
|
||||||
@@ -106,3 +115,4 @@ so-steno:
|
|||||||
- /nsm/pcaptmp:/tmp:rw
|
- /nsm/pcaptmp:/tmp:rw
|
||||||
- /nsm/pcapout:/nsm/pcapout:rw
|
- /nsm/pcapout:/nsm/pcapout:rw
|
||||||
- /opt/so/log/stenographer:/var/log/stenographer:rw
|
- /opt/so/log/stenographer:/var/log/stenographer:rw
|
||||||
|
- /opt/so/conf/steno/sensoroni.json:/opt/sensoroni/sensoroni.json:ro
|
||||||
|
|||||||
Reference in New Issue
Block a user