mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 18:22:47 +01:00
55 lines
835 B
Plaintext
55 lines
835 B
Plaintext
base:
|
|
'G@role:so-sensor':
|
|
- ssl
|
|
- common
|
|
- pcap
|
|
- suricata
|
|
- bro
|
|
- filebeat
|
|
|
|
'G@role:eval':
|
|
- common
|
|
- sensor
|
|
- master
|
|
- eval
|
|
|
|
'G@role:so-master':
|
|
- common
|
|
- ca
|
|
- ssl
|
|
- firewall
|
|
- master
|
|
- idstools
|
|
- redis
|
|
- elasticsearch
|
|
- logstash
|
|
|
|
# Storage node logic
|
|
|
|
'G@role:so-node and I@node:node_type:parser':
|
|
- match: pillar
|
|
- common
|
|
- logstash
|
|
|
|
'G@role:so-node and I@node:node_type:hot':
|
|
- match: pillar
|
|
- common
|
|
- logstash
|
|
- elasticsearch
|
|
|
|
'G@role:so-node and I@node:node_type:warm':
|
|
- match: pillar
|
|
- common
|
|
- elasticsearch
|
|
|
|
'G@role:so-node and I@node:node_type:storage':
|
|
- match: compound
|
|
- common
|
|
- logstash
|
|
- elasticsearch
|
|
|
|
'G@role:mastersensor':
|
|
- common
|
|
- sensor
|
|
- master
|