mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-14 05:02:52 +01:00
27 lines
743 B
Django/Jinja
27 lines
743 B
Django/Jinja
{%- if salt['grains.get']('role') == 'so-master' %}
|
|
{% set master = salt['pillar.get']('static:masterip', '') %}
|
|
{%- set nodetype = 'master' %}
|
|
{% elif grains.role == 'so-heavynode' %}
|
|
{% set master = salt['pillar.get']('node:mainip', '') %}
|
|
{%- set nodetype = salt['pillar.get']('node:node_type', 'search') %}
|
|
{%- else %}
|
|
{%- set nodetype = salt['pillar.get']('node:node_type', 'storage') %}
|
|
{% set master = salt['pillar.get']('static:masterip', '') %}
|
|
{%- endif %}
|
|
|
|
|
|
output {
|
|
redis {
|
|
host => '{{ master }}'
|
|
data_type => 'list'
|
|
{%- if nodetype == 'parser' %}
|
|
key => 'logstash:parsed'
|
|
{%- else %}
|
|
key => 'logstash:unparsed'
|
|
{%- endif %}
|
|
congestion_interval => 1
|
|
congestion_threshold => 50000000
|
|
# batch_events => 500
|
|
}
|
|
}
|