mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-18 15:02:50 +01:00
216 lines
4.1 KiB
Plaintext
216 lines
4.1 KiB
Plaintext
{%- set OSQUERY = salt['pillar.get']('master:osquery', '0') -%}
|
|
{%- set WAZUH = salt['pillar.get']('master:wazuh', '0') -%}
|
|
{%- set THEHIVE = salt['pillar.get']('master:thehive', '0') -%}
|
|
{%- set PLAYBOOK = salt['pillar.get']('master:playbook', '0') -%}
|
|
{%- set FREQSERVER = salt['pillar.get']('master:freq', '0') -%}
|
|
{%- set DOMAINSTATS = salt['pillar.get']('master:domainstats', '0') -%}
|
|
{%- set BROVER = salt['pillar.get']('static:broversion', 'COMMUNITY') -%}
|
|
|
|
eval:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-dockerregistry
|
|
- so-sensoroni
|
|
- so-idstools
|
|
- so-auth-api
|
|
- so-auth-ui
|
|
{%- if OSQUERY != 0 %}
|
|
- so-mysql
|
|
- so-fleet
|
|
- so-redis
|
|
{%- endif %}
|
|
- so-elasticsearch
|
|
- so-logstash
|
|
- so-kibana
|
|
- so-steno
|
|
- so-suricata
|
|
- so-zeek
|
|
- so-curator
|
|
- so-elasalert
|
|
{%- if WAZUH != 0 %}
|
|
- so-wazuh
|
|
{%- endif %}
|
|
- so-soctopus
|
|
{%- if THEHIVE != 0 %}
|
|
- so-thehive
|
|
- so-thehive-es
|
|
- so-cortex
|
|
{%- endif %}
|
|
{%- if PLAYBOOK != 0 %}
|
|
- so-playbook
|
|
- so-navigator
|
|
{%- endif %}
|
|
{%- if FREQSERVER != 0 %}
|
|
- so-freqserver
|
|
{%- endif %}
|
|
{%- if DOMAINSTATS != 0 %}
|
|
- so-domainstats
|
|
{%- endif %}
|
|
heavy_node:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-redis
|
|
- so-logstash
|
|
- so-elasticsearch
|
|
- so-curator
|
|
- so-steno
|
|
- so-suricata
|
|
- so-wazuh
|
|
- so-filebeat
|
|
{%- if BROVER != 'SURICATA' %}
|
|
- so-zeek
|
|
{%- endif %}
|
|
helix:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-idstools
|
|
- so-steno
|
|
- so-zeek
|
|
- so-zeek
|
|
- so-redis
|
|
- so-logstash
|
|
- so-filebeat
|
|
hot_node:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-logstash
|
|
- so-elasticsearch
|
|
- so-curator
|
|
master_search:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-sensoroni
|
|
- so-acng
|
|
- so-idstools
|
|
- so-redis
|
|
- so-auth-api
|
|
- so-auth-ui
|
|
- so-logstash
|
|
- so-elasticsearch
|
|
- so-curator
|
|
- so-kibana
|
|
- so-elasalert
|
|
- so-filebeat
|
|
- so-soctopus
|
|
{%- if OSQUERY != 0 %}
|
|
- so-mysql
|
|
- so-fleet
|
|
- so-redis
|
|
{%- endif %}
|
|
{%- if WAZUH != 0 %}
|
|
- so-wazuh
|
|
{%- endif %}
|
|
- so-soctopus
|
|
{%- if THEHIVE != 0 %}
|
|
- so-thehive
|
|
- so-thehive-es
|
|
- so-cortex
|
|
{%- endif %}
|
|
{%- if PLAYBOOK != 0 %}
|
|
- so-playbook
|
|
- so-navigator
|
|
{%- endif %}
|
|
{%- if FREQSERVER != 0 %}
|
|
- so-freqserver
|
|
{%- endif %}
|
|
{%- if DOMAINSTATS != 0 %}
|
|
- so-domainstats
|
|
{%- endif %}
|
|
master:
|
|
containers:
|
|
- so-dockerregistry
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-sensoroni
|
|
- so-acng
|
|
- so-idstools
|
|
- so-redis
|
|
- so-auth-api
|
|
- so-auth-ui
|
|
- so-elasticsearch
|
|
- so-logstash
|
|
- so-kibana
|
|
- so-elasalert
|
|
- so-filebeat
|
|
{%- if OSQUERY != 0 %}
|
|
- so-mysql
|
|
- so-fleet
|
|
- so-redis
|
|
{%- endif %}
|
|
{%- if WAZUH != 0 %}
|
|
- so-wazuh
|
|
{%- endif %}
|
|
- so-soctopus
|
|
{%- if THEHIVE != 0 %}
|
|
- so-thehive
|
|
- so-thehive-es
|
|
- so-cortex
|
|
{%- endif %}
|
|
{%- if PLAYBOOK != 0 %}
|
|
- so-playbook
|
|
- so-navigator
|
|
{%- endif %}
|
|
{%- if FREQSERVER != 0 %}
|
|
- so-freqserver
|
|
{%- endif %}
|
|
{%- if DOMAINSTATS != 0 %}
|
|
- so-domainstats
|
|
{%- endif %}
|
|
parser_node:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-logstash
|
|
search_node:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-logstash
|
|
- so-elasticsearch
|
|
- so-curator
|
|
- so-filebeat
|
|
{%- if WAZUH != 0 %}
|
|
- so-wazuh
|
|
{%- endif %}
|
|
sensor:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-steno
|
|
- so-suricata
|
|
{%- if BROVER != 'SURICATA' %}
|
|
- so-zeek
|
|
{%- endif %}
|
|
- so-wazuh
|
|
- so-filebeat
|
|
warm_node:
|
|
containers:
|
|
- so-core
|
|
- so-telegraf
|
|
- so-influxdb
|
|
- so-grafana
|
|
- so-elasticsearch
|