mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-05-09 21:02:36 +02:00
Mike Reeves
3ecd19d085
The Telegraf backend selector lived at global.telegraf_output but it is
a Telegraf-scoped setting, not a cross-cutting grid global. Move both
the value and the UI annotation under the telegraf pillar so it shows
up alongside the other Telegraf tuning knobs in the Configuration UI.
- salt/telegraf/defaults.yaml: add telegraf.output: BOTH
- salt/telegraf/soc_telegraf.yaml: add telegraf.output annotation
- salt/global/defaults.yaml: remove global.telegraf_output
- salt/global/soc_global.yaml: remove global.telegraf_output annotation
- salt/vars/globals.map.jinja: drop telegraf_output from GLOBALS
- salt/firewall/map.jinja: read via pillar.get('telegraf:output')
- salt/postgres/telegraf_users.sls: read via pillar.get('telegraf:output')
- salt/telegraf/etc/telegraf.conf: read via TELEGRAFMERGED.output
- salt/postgres/tools/sbin/so-stats-show: update user-facing docs
No behavioral change — default stays BOTH.
131 lines
2.4 KiB
YAML
131 lines
2.4 KiB
YAML
telegraf:
|
|
enabled: False
|
|
output: BOTH
|
|
config:
|
|
interval: '30s'
|
|
metric_batch_size: 1000
|
|
metric_buffer_limit: 10000
|
|
collection_jitter: '0s'
|
|
flush_interval: '10s'
|
|
flush_jitter: '0s'
|
|
debug: false
|
|
quiet: false
|
|
scripts:
|
|
eval:
|
|
- agentstatus.sh
|
|
- checkfiles.sh
|
|
- influxdbsize.sh
|
|
- lasthighstate.sh
|
|
- oldpcap.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- sostatus.sh
|
|
- suriloss.sh
|
|
- surirules.sh
|
|
- zeekcaptureloss.sh
|
|
- zeekloss.sh
|
|
standalone:
|
|
- agentstatus.sh
|
|
- checkfiles.sh
|
|
- eps.sh
|
|
- influxdbsize.sh
|
|
- lasthighstate.sh
|
|
- oldpcap.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- redis.sh
|
|
- sostatus.sh
|
|
- suriloss.sh
|
|
- surirules.sh
|
|
- zeekcaptureloss.sh
|
|
- zeekloss.sh
|
|
- features.sh
|
|
manager:
|
|
- agentstatus.sh
|
|
- influxdbsize.sh
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- redis.sh
|
|
- sostatus.sh
|
|
- features.sh
|
|
managerhype:
|
|
- agentstatus.sh
|
|
- influxdbsize.sh
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- redis.sh
|
|
- sostatus.sh
|
|
- features.sh
|
|
managersearch:
|
|
- agentstatus.sh
|
|
- eps.sh
|
|
- influxdbsize.sh
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- redis.sh
|
|
- sostatus.sh
|
|
- features.sh
|
|
import:
|
|
- influxdbsize.sh
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- sostatus.sh
|
|
sensor:
|
|
- checkfiles.sh
|
|
- lasthighstate.sh
|
|
- oldpcap.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- sostatus.sh
|
|
- suriloss.sh
|
|
- surirules.sh
|
|
- zeekcaptureloss.sh
|
|
- zeekloss.sh
|
|
- features.sh
|
|
heavynode:
|
|
- checkfiles.sh
|
|
- eps.sh
|
|
- lasthighstate.sh
|
|
- oldpcap.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- redis.sh
|
|
- sostatus.sh
|
|
- suriloss.sh
|
|
- surirules.sh
|
|
- zeekcaptureloss.sh
|
|
- zeekloss.sh
|
|
idh:
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- sostatus.sh
|
|
searchnode:
|
|
- eps.sh
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- sostatus.sh
|
|
- features.sh
|
|
receiver:
|
|
- eps.sh
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- raid.sh
|
|
- redis.sh
|
|
- sostatus.sh
|
|
fleet:
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- sostatus.sh
|
|
hypervisor:
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- sostatus.sh
|
|
desktop:
|
|
- lasthighstate.sh
|
|
- os.sh
|
|
- sostatus.sh
|