mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
73 lines
1.1 KiB
Plaintext
73 lines
1.1 KiB
Plaintext
base:
|
|
'*':
|
|
- patch.needs_restarting
|
|
- docker.config
|
|
|
|
'*_mastersearch or *_heavynode':
|
|
- match: compound
|
|
- logstash
|
|
- logstash.master
|
|
- logstash.search
|
|
|
|
'*_sensor':
|
|
- static
|
|
- firewall.*
|
|
- brologs
|
|
- healthcheck.sensor
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_master or *_mastersearch':
|
|
- match: compound
|
|
- static
|
|
- firewall.*
|
|
- data.*
|
|
- secrets
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_master':
|
|
- logstash
|
|
- logstash.master
|
|
|
|
'*_eval':
|
|
- static
|
|
- firewall.*
|
|
- data.*
|
|
- brologs
|
|
- secrets
|
|
- healthcheck.eval
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_node':
|
|
- static
|
|
- firewall.*
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_heavynode':
|
|
- static
|
|
- firewall.*
|
|
- brologs
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_helix':
|
|
- static
|
|
- firewall.*
|
|
- fireeye
|
|
- brologs
|
|
- logstash
|
|
- logstash.helix
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_fleet':
|
|
- static
|
|
- firewall.*
|
|
- data.*
|
|
- secrets
|
|
- minions.{{ grains.id }}
|
|
|
|
'*_searchnode':
|
|
- static
|
|
- firewall.*
|
|
- logstash
|
|
- logstash.search
|
|
- minions.{{ grains.id }}
|