mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-07-19 07:13:39 +02:00
Josh Patterson
a330bea25e
Rename the two custom push-detection beacons for clarity: - pillar_db -> postgres_pillar_beacon - rules_db -> rules_beacon Salt resolves a beacon by its config-key name to a _beacons/ module of the same filename and tags its events salt/beacon/<minion>/<name>/<tag>, so each rename touches the module file, the beacon config key in beacons_pushstate.conf.jinja, and the reactor tag patterns in reactor_pushstate.conf together. Watermark filenames and log prefixes are updated to match; reactor run() logic is unchanged.
12 lines
421 B
Django/Jinja
12 lines
421 B
Django/Jinja
{% from 'salt/auto_apply.map.jinja' import AUTOAPPLY %}
|
|
beacons:
|
|
postgres_pillar_beacon:
|
|
- interval: {{ AUTOAPPLY.drain_interval }}
|
|
- disable_during_state_run: False
|
|
rules_beacon:
|
|
- interval: {{ AUTOAPPLY.drain_interval }}
|
|
- disable_during_state_run: False
|
|
- paths:
|
|
/opt/so/saltstack/local/salt/suricata/rules: suricata
|
|
/opt/so/saltstack/local/salt/strelka/rules/compiled: strelka
|