mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 17:52:46 +01:00
38 lines
1.2 KiB
YAML
38 lines
1.2 KiB
YAML
{% if grains['role'] in ['so-node', 'so-heavynode'] %}
|
|
{%- set elasticsearch = salt['pillar.get']('elasticsearch:mainip', '') -%}
|
|
{% elif grains['role'] in ['so-eval', 'so-managersearch', 'so-standalone'] %}
|
|
{%- set elasticsearch = salt['pillar.get']('manager:mainip', '') -%}
|
|
{%- endif %}
|
|
{%- if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %}
|
|
{%- set ES_USER = salt['pillar.get']('elasticsearch:auth:users:so_elastic_user:user', '') %}
|
|
{%- set ES_PASS = salt['pillar.get']('elasticsearch:auth:users:so_elastic_user:pass', '') %}
|
|
{%- else %}
|
|
{%- set ES_USER = '' %}
|
|
{%- set ES_PASS = '' %}
|
|
{%- endif %}
|
|
|
|
---
|
|
# Remember, leave a key empty if there is no value. None will be a string,
|
|
# not a Python "NoneType"
|
|
client:
|
|
hosts:
|
|
- {{elasticsearch}}
|
|
port: 9200
|
|
{%- if salt['pillar.get']('elasticsearch:auth:enabled') is sameas true %}
|
|
http_auth: {{ ES_USER }}:{{ ES_PASS }}
|
|
{%- endif %}
|
|
url_prefix:
|
|
use_ssl: True
|
|
certificate:
|
|
client_cert:
|
|
client_key:
|
|
ssl_no_validate: True
|
|
timeout: 30
|
|
master_only: False
|
|
|
|
logging:
|
|
loglevel: INFO
|
|
logfile: '/var/log/curator/curator.log'
|
|
logformat: default
|
|
blacklist: ['elasticsearch', 'urllib3']
|