mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
91 lines
1.4 KiB
Plaintext
91 lines
1.4 KiB
Plaintext
{%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') %}
|
|
base:
|
|
'G@role:so-sensor':
|
|
- ca
|
|
- ssl
|
|
- common
|
|
- firewall
|
|
- pcap
|
|
- suricata
|
|
{%- if BROVER != 'SURICATA' %}
|
|
- bro
|
|
{%- endif %}
|
|
- filebeat
|
|
- schedule
|
|
|
|
'G@role:so-eval':
|
|
- ca
|
|
- ssl
|
|
- common
|
|
- firewall
|
|
- master
|
|
- idstools
|
|
- redis
|
|
- elasticsearch
|
|
- logstash
|
|
- kibana
|
|
- pcap
|
|
- suricata
|
|
- bro
|
|
- curator
|
|
- utility
|
|
- schedule
|
|
|
|
|
|
'G@role:so-master':
|
|
- ca
|
|
- ssl
|
|
- common
|
|
- firewall
|
|
- master
|
|
- idstools
|
|
- redis
|
|
- elasticsearch
|
|
- logstash
|
|
- kibana
|
|
- utility
|
|
- schedule
|
|
|
|
# Storage node logic
|
|
|
|
'G@role:so-node and I@node:node_type:parser':
|
|
- match: pillar
|
|
- common
|
|
- firewall
|
|
- logstash
|
|
- schedule
|
|
|
|
'G@role:so-node and I@node:node_type:hot':
|
|
- match: pillar
|
|
- common
|
|
- firewall
|
|
- logstash
|
|
- elasticsearch
|
|
- curator
|
|
- schedule
|
|
|
|
'G@role:so-node and I@node:node_type:warm':
|
|
- match: pillar
|
|
- common
|
|
- firewall
|
|
- elasticsearch
|
|
- schedule
|
|
|
|
'G@role:so-node and I@node:node_type:storage':
|
|
- match: compound
|
|
- ca
|
|
- ssl
|
|
- common
|
|
- firewall
|
|
- logstash
|
|
- elasticsearch
|
|
- curator
|
|
- schedule
|
|
|
|
'G@role:mastersensor':
|
|
- common
|
|
- firewall
|
|
- sensor
|
|
- master
|
|
- schedule
|