telegraf:
  enabled:
    description: Enables the grid metrics collection process. WARNING - Security Onion grid health monitoring requires this process to remain enabled. Disabling it will cause unexpected and unsupported results.
    forcedType: bool
    advanced: True
    helpLink: influxdb
  output:
    description: Selects the backend(s) Telegraf writes metrics to. INFLUXDB keeps the current behavior; POSTGRES writes to the grid's Postgres instance; BOTH dual-writes for migration validation.
    options:
      - INFLUXDB
      - POSTGRES
      - BOTH
    global: True
    advanced: True
    helpLink: influxdb
  config:
    interval:
      description: Data collection interval.
      global: True
      helpLink: influxdb
    metric_batch_size: 
      description: Data collection batch size.
      global: True
      advanced: True
      helpLink: influxdb
    metric_buffer_limit:
      description: Data collection buffer size.
      global: True
      advanced: True
      helpLink: influxdb
    collection_jitter: 
      description: Jitter of the flush interval.
      global: True
      advanced: True
      helpLink: influxdb
    flush_interval:
      description: Flush interval for all outputs.
      global: True
      advanced: True
      helpLink: influxdb
    flush_jitter: 
      description: Jitter the flush interval.
      global: True
      advanced: True
      helpLink: influxdb
    debug: 
      description: Run telegraf with debug log messages
      forcedType: bool
      advanced: True
      helpLink: influxdb
    quiet: 
      description: Run telegraf in quiet mode (error log messages only).
      forcedType: bool
      advanced: True
      helpLink: influxdb
  scripts:
    eval: &telegrafscripts
      description: List of input.exec scripts to run for this node type. The script must be present in salt/telegraf/scripts.
      forcedType: "[]string"
      multiline: True
      advanced: True
      helpLink: influxdb
    standalone: *telegrafscripts
    manager: *telegrafscripts
    managersearch: *telegrafscripts
    import: *telegrafscripts
    sensor: *telegrafscripts
    heavynode: *telegrafscripts
    idh: *telegrafscripts
    searchnode: *telegrafscripts
    receiver: *telegrafscripts
    fleet: *telegrafscripts
    desktop: *telegrafscripts