Files
securityonion/salt/telegraf/soc_telegraf.yaml
T
2026-07-10 10:35:37 -04:00

74 lines
2.4 KiB
YAML

telegraf:
enabled:
description: Enables the grid metrics collection process. WARNING - Security Onion grid health monitoring requires this process to remain enabled. Disabling it will cause unexpected and unsupported results.
forcedType: bool
advanced: True
helpLink: influxdb
output:
description: Selects the backend(s) Telegraf writes metrics to. INFLUXDB keeps the current behavior; POSTGRES writes to the grid's Postgres instance; BOTH dual-writes for migration validation. When set to BOTH, the grid screen's metrics are pulled from Postgres, and the InfluxDB tool link remains visible. When set to POSTGRES, the InfluxDB tool link is removed.
options:
- INFLUXDB
- POSTGRES
- BOTH
global: True
advanced: True
helpLink: influxdb
config:
interval:
description: Data collection interval.
global: True
helpLink: influxdb
metric_batch_size:
description: Data collection batch size.
global: True
advanced: True
helpLink: influxdb
metric_buffer_limit:
description: Data collection buffer size.
global: True
advanced: True
helpLink: influxdb
collection_jitter:
description: Jitter of the flush interval.
global: True
advanced: True
helpLink: influxdb
flush_interval:
description: Flush interval for all outputs.
global: True
advanced: True
helpLink: influxdb
flush_jitter:
description: Jitter the flush interval.
global: True
advanced: True
helpLink: influxdb
debug:
description: Run telegraf with debug log messages
forcedType: bool
advanced: True
helpLink: influxdb
quiet:
description: Run telegraf in quiet mode (error log messages only).
forcedType: bool
advanced: True
helpLink: influxdb
scripts:
eval: &telegrafscripts
description: List of input.exec scripts to run for this node type. The script must be present in salt/telegraf/scripts.
forcedType: "[]string"
multiline: True
advanced: True
helpLink: influxdb
standalone: *telegrafscripts
manager: *telegrafscripts
managersearch: *telegrafscripts
import: *telegrafscripts
sensor: *telegrafscripts
heavynode: *telegrafscripts
idh: *telegrafscripts
searchnode: *telegrafscripts
receiver: *telegrafscripts
fleet: *telegrafscripts
desktop: *telegrafscripts