securityonion/salt/idstools/sync_files.sls

# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at 
# https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0.


idstoolsdir:
  file.directory:
    - name: /opt/so/conf/idstools/etc
    - user: 939
    - group: 939
    - makedirs: True

idstoolsetcsync:
  file.recurse:
    - name: /opt/so/conf/idstools/etc
    - source: salt://idstools/etc
    - user: 939
    - group: 939
    - template: jinja

rulesdir:
  file.directory:
    - name: /opt/so/rules/nids
    - user: 939
    - group: 939
    - makedirs: True

SOrulesdir:
  file.directory:
    - name: /opt/so/rules/nids/sorules
    - user: 939
    - group: 939
    - makedirs: True

# Don't show changes because all.rules can be large
synclocalnidsrules:
  file.recurse:
    - name: /opt/so/rules/nids/
    - source: salt://idstools/rules/
    - user: 939
    - group: 939
    - show_changes: False
    - include_pat: 'E@.rules'

# Don't show changes because all.rules can be large
syncnidsSOrules:
  file.recurse:
    - name: /opt/so/rules/nids/sorules
    - source: salt://idstools/sorules/
    - user: 939
    - group: 939
    - show_changes: False
    - include_pat: 'E@.rules'