mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 02:02:50 +01:00
21 lines
489 B
Plaintext
21 lines
489 B
Plaintext
{%- set master = grains['master'] %}
|
|
{%- if salt['grains.get']('role') == 'so-master' %}
|
|
{%- set nodetype = 'master' %}
|
|
{%- else %}
|
|
{%- set nodetype = salt['pillar.get']('node:node_type', 'storage') %}
|
|
{%- endif %}
|
|
output {
|
|
redis {
|
|
host => '{{ master }}'
|
|
data_type => 'list'
|
|
{%- if nodetype == 'parser' %}
|
|
key => 'logstash:parsed'
|
|
{%- else %}
|
|
key => 'logstash:unparsed'
|
|
{%- endif %}
|
|
congestion_interval => 1
|
|
congestion_threshold => 50000000
|
|
# batch_events => 500
|
|
}
|
|
}
|