mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
f5c044e3e3
* The playbook log dir is owned by the socore group, so we can use `su root socore` * Addresses https://github.com/Security-Onion-Solutions/securityonion/pull/2681#issuecomment-767761670 --- * influxdb runs as root, so we can set the log directory permissions to 755 for this service
36 lines
943 B
Plaintext
36 lines
943 B
Plaintext
{%- set logrotate_conf = salt['pillar.get']('logrotate:conf') %}
|
|
{%- set group_conf = salt['pillar.get']('logrotate:group_conf') %}
|
|
|
|
|
|
/opt/so/log/aptcacher-ng/*.log
|
|
/opt/so/log/idstools/*.log
|
|
/opt/so/log/nginx/*.log
|
|
/opt/so/log/soc/*.log
|
|
/opt/so/log/kratos/*.log
|
|
/opt/so/log/kibana/*.log
|
|
/opt/so/log/influxdb/*.log
|
|
/opt/so/log/elastalert/*.log
|
|
/opt/so/log/soctopus/*.log
|
|
/opt/so/log/curator/*.log
|
|
/opt/so/log/fleet/*.log
|
|
/opt/so/log/suricata/*.log
|
|
/opt/so/log/mysql/*.log
|
|
/opt/so/log/telegraf/*.log
|
|
/opt/so/log/redis/*.log
|
|
/opt/so/log/sensoroni/*.log
|
|
/opt/so/log/stenographer/*.log
|
|
/opt/so/log/salt/so-salt-minion-check
|
|
/opt/so/log/salt/minion
|
|
/opt/so/log/salt/master
|
|
{
|
|
{{ logrotate_conf | indent(width=4) }}
|
|
}
|
|
|
|
# Playbook's log directory needs additional configuration
|
|
# because Playbook requires a more permissive directory
|
|
/opt/so/log/playbook/*.log
|
|
{
|
|
{{ logrotate_conf | indent(width=4) }}
|
|
{{ group_conf | indent(width=4) }}
|
|
}
|