mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 17:52:46 +01:00
44 lines
2.3 KiB
Django/Jinja
44 lines
2.3 KiB
Django/Jinja
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
{% import_yaml 'elasticsearch/defaults.yaml' as ELASTICSEARCHDEFAULTS with context %}
|
|
{% from 'logstash/map.jinja' import LOGSTASH_NODES with context %}
|
|
|
|
{% set HIGHLANDER = salt['pillar.get']('global:highlander', False) %}
|
|
|
|
{% if grains.id.split('_') | last in ['manager','managersearch','standalone'] %}
|
|
{% if LOGSTASH_NODES | length > 1 %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.update({'discovery': {'seed_hosts': []}}) %}
|
|
{% for NODE in LOGSTASH_NODES %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.discovery.seed_hosts.append(NODE.keys()|first) %}
|
|
{% endfor %}
|
|
{% if grains.id.split('_') | last == 'manager' %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.node.update({'roles': ['master','data','remote_cluster_client']}) %}
|
|
{% else %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.node.update({'roles': ['master', 'data_hot', 'remote_cluster_client']}) %}
|
|
{% endif %}
|
|
{% endif %}
|
|
{% elif grains.id.split('_') | last == 'searchnode' %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.node.update({'roles': ['data_hot', 'ingest']}) %}
|
|
{% if HIGHLANDER %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.node.roles.extend(['ml', 'master', 'transform']) %}
|
|
{% endif %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.update({'discovery': {'seed_hosts': [GLOBALS.manager]}}) %}
|
|
{% endif %}
|
|
{% if HIGHLANDER %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.xpack.ml.update({'enabled': true}) %}
|
|
{% endif %}
|
|
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.node.update({'name': GLOBALS.hostname}) %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.cluster.update({'name': GLOBALS.hostname}) %}
|
|
{% do ELASTICSEARCHDEFAULTS.elasticsearch.config.transport.update({'publish_host': GLOBALS.hostname}) %}
|
|
|
|
{% set ELASTICSEARCHMERGED = salt['pillar.get']('elasticsearch', default=ELASTICSEARCHDEFAULTS.elasticsearch, merge=True) %}
|
|
|
|
{% if salt['pillar.get']('elasticsearch:config:path:repo', False) %}
|
|
{% for repo in pillar.elasticsearch.config.path.repo %}
|
|
{# remove elasticsearch.config.path.repo value if the directory doesn't exist on the node #}
|
|
{% if not salt['file.directory_exists'](repo) %}
|
|
{% do ELASTICSEARCHMERGED.config.path.repo.remove(repo) %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
{% endif %}
|