mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-09 02:32:46 +01:00
22 lines
550 B
Plaintext
22 lines
550 B
Plaintext
{%- if salt['grains.get']('role') == 'so-master' %}
|
|
{%- set master = salt['pillar.get']('master:mainip', '') -%}
|
|
{%- set nodetype = 'master' %}
|
|
{%- else %}
|
|
{%- set nodetype = salt['pillar.get']('node:node_type', 'storage') %}
|
|
{%- set master = grains['master'] %}
|
|
{%- endif %}
|
|
output {
|
|
redis {
|
|
host => '{{ master }}'
|
|
data_type => 'list'
|
|
{%- if nodetype == 'parser' %}
|
|
key => 'logstash:parsed'
|
|
{%- else %}
|
|
key => 'logstash:unparsed'
|
|
{%- endif %}
|
|
congestion_interval => 1
|
|
congestion_threshold => 50000000
|
|
# batch_events => 500
|
|
}
|
|
}
|