mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
17 lines
485 B
Plaintext
17 lines
485 B
Plaintext
{%- set interface = salt['pillar.get']('sensor:interface', 'bond0') %}
|
|
{
|
|
"Threads": [
|
|
{ "PacketsDirectory": "/nsm/pcap"
|
|
, "IndexDirectory": "/nsm/pcapindex"
|
|
, "MaxDirectoryFiles": 30000
|
|
, "DiskFreePercentage": 10
|
|
}
|
|
]
|
|
, "StenotypePath": "/usr/bin/stenotype"
|
|
, "Interface": "{{ interface }}"
|
|
, "Port": 1234
|
|
, "Host": "127.0.0.1"
|
|
, "Flags": ["-v", "--uid=stenographer", "--gid=stenographer"{{ bpf_compiled }}]
|
|
, "CertPath": "/etc/stenographer/certs"
|
|
}
|