mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-22 17:03:07 +01:00
48 lines
763 B
Plaintext
48 lines
763 B
Plaintext
{%- set ip = salt['pillar.get']('static:masterip', '') %}
|
|
|
|
[es]
|
|
es_url = http://{{ip}}:9200
|
|
|
|
[fir]
|
|
fir_url = YOURFIRURL
|
|
fir_token = YOURFIRTOKEN
|
|
fir_actor = 3
|
|
fir_category = 3
|
|
fir_confidentiality = 1
|
|
fir_detection = 2
|
|
fir_plan = 8
|
|
fir_severity = 4
|
|
|
|
[grr]
|
|
grr_url = YOURGRRURL
|
|
grr_user = YOURGRRUSER
|
|
grr_pass = YOURGRRPASS
|
|
|
|
[hive]
|
|
hive_url = https://{{ip}}/thehive
|
|
hive_key = YOURHIVEKEY
|
|
tlp = 3
|
|
|
|
[misp]
|
|
misp_url = YOURMISPURL
|
|
misp_key = YOURMISPKEY
|
|
misp_verifycert = False
|
|
distrib = 0
|
|
threat = 4
|
|
analysis = 0
|
|
|
|
[rtir]
|
|
rtir_url = YOURRTIRURL
|
|
rtir_api = REST/1.0/
|
|
rtir_user = YOURRTIRUSER
|
|
rtir_pass = YOURRTIRPASS
|
|
rtir_queue = Incidents
|
|
rtir_creator = root
|
|
|
|
[slack]
|
|
slack_url = YOURSLACKWORKSPACE
|
|
slack_webhook = YOURSLACKWEBHOOK
|
|
|
|
[log]
|
|
logfile = /tmp/soctopus.log
|