mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 09:42:46 +01:00
63 lines
2.7 KiB
YAML
63 lines
2.7 KiB
YAML
{%- set NODE_ROUTE_TYPE = salt['pillar.get']('elasticsearch:node_route_type', 'hot') %}
|
|
{%- set NODEIP = salt['pillar.get']('elasticsearch:mainip') %}
|
|
{%- set FEATURES = salt['pillar.get']('elastic:features', False) %}
|
|
{%- set TRUECLUSTER = salt['pillar.get']('elasticsearch:true_cluster', False) %}
|
|
{%- if TRUECLUSTER is sameas true %}
|
|
{%- set ESCLUSTERNAME = salt['pillar.get']('elasticsearch:true_cluster_name') %}
|
|
{%- else %}
|
|
{%- set ESCLUSTERNAME = salt['pillar.get']('elasticsearch:esclustername') %}
|
|
{%- endif %}
|
|
cluster.name: "{{ ESCLUSTERNAME }}"
|
|
network.host: 0.0.0.0
|
|
|
|
# minimum_master_nodes need to be explicitly set when bound on a public IP
|
|
# set to 1 to allow single node clusters
|
|
# Details: https://github.com/elastic/elasticsearch/pull/17288
|
|
#discovery.zen.minimum_master_nodes: 1
|
|
# This is a test -- if this is here, then the volume is mounted correctly.
|
|
path.logs: /var/log/elasticsearch
|
|
action.destructive_requires_name: true
|
|
transport.bind_host: 0.0.0.0
|
|
transport.publish_host: {{ grains.host }}
|
|
transport.publish_port: 9300
|
|
cluster.routing.allocation.disk.threshold_enabled: true
|
|
cluster.routing.allocation.disk.watermark.low: 95%
|
|
cluster.routing.allocation.disk.watermark.high: 98%
|
|
cluster.routing.allocation.disk.watermark.flood_stage: 98%
|
|
{%- if FEATURES is sameas true %}
|
|
#xpack.security.enabled: false
|
|
#xpack.security.http.ssl.enabled: false
|
|
#xpack.security.transport.ssl.enabled: false
|
|
#xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
|
|
#xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
|
|
#xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
|
|
#xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
|
|
#xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
|
|
#xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
|
|
#xpack.security.transport.ssl.verification_mode: none
|
|
#xpack.security.http.ssl.client_authentication: none
|
|
#xpack.security.authc:
|
|
# anonymous:
|
|
# username: anonymous_user
|
|
# roles: superuser
|
|
# authz_exception: true
|
|
{%- endif %}
|
|
node.attr.box_type: {{ NODE_ROUTE_TYPE }}
|
|
node.name: {{ grains.host }}
|
|
script.max_compilations_rate: 1000/1m
|
|
{%- if TRUECLUSTER is sameas true %}
|
|
{%- if grains.role == 'so-manager' %}
|
|
{%- if salt['pillar.get']('nodestab', {}) %}
|
|
node.roles: [ master, data, remote_cluster_client ]
|
|
discovery.seed_hosts:
|
|
- {{ grains.master }}
|
|
{%- for SN, SNDATA in salt['pillar.get']('nodestab', {}).items() %}
|
|
- {{ SN.split('_')|first }}
|
|
{%- endfor %}
|
|
{%- endif %}
|
|
{%- else %}
|
|
node.roles: [ data, ingest, ml ]
|
|
discovery.seed_hosts:
|
|
- {{ grains.master }}
|
|
{%- endif %}
|
|
{%- endif %} |