Files
securityonion/salt/elasticfleet/soc_elasticfleet.yaml

37 lines
1.2 KiB
YAML

elasticfleet:
enabled:
description: You can enable or disable Elastic Fleet.
advanced: True
helpLink: elastic-fleet.html
logging:
zeek:
excluded:
description: This is a list of Zeek logs that are excluded from being shipped through the data processing pipeline. If you remove a log from this list, Elastic Agent will attempt to process it. If an ingest node pipeline is not available to process the logs, you may experience errors.
forcedType: "[]string"
helpLink: zeek.html
config:
server:
endpoints_enrollment:
description: Endpoint enrollment key.
global: True
helpLink: elastic-fleet.html
sensitive: True
advanced: True
es_token:
description: Elastic auth token.
global: True
helpLink: elastic-fleet.html
sensitive: True
advanced: True
grid_enrollment:
description: Grid enrollment key.
global: True
helpLink: elastic-fleet.html
sensitive: True
advanced: True
url:
description: Agent connection URL.
global: True
helpLink: elastic-fleet.html
advanced: True