mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 17:52:46 +01:00
55 lines
921 B
Plaintext
55 lines
921 B
Plaintext
base:
|
|
'*':
|
|
- patch.needs_restarting
|
|
|
|
'G@role:so-mastersearch or G@role:so-heavynode':
|
|
- match: compound
|
|
- logstash.master
|
|
- logstash.search
|
|
|
|
'G@role:so-sensor':
|
|
- static
|
|
- firewall.*
|
|
- brologs
|
|
- minions.{{ grains.id }}
|
|
|
|
'G@role:so-master or G@role:so-mastersearch':
|
|
- match: compound
|
|
- static
|
|
- firewall.*
|
|
- data.*
|
|
- auth
|
|
- minions.{{ grains.id }}
|
|
|
|
'G@role:so-master':
|
|
- logstash.master
|
|
|
|
'G@role:so-eval':
|
|
- static
|
|
- firewall.*
|
|
- data.*
|
|
- brologs
|
|
- auth
|
|
- logstash.eval
|
|
- minions.{{ grains.id }}
|
|
|
|
'G@role:so-node':
|
|
- static
|
|
- firewall.*
|
|
- minions.{{ grains.id }}
|
|
|
|
'G@role:so-heavynode':
|
|
- static
|
|
- firewall.*
|
|
- brologs
|
|
- minions.{{ grains.id }}
|
|
|
|
'G@role:so-helix':
|
|
- static
|
|
- firewall.*
|
|
- fireeye
|
|
- brologs
|
|
- logstash.helix
|
|
- static
|
|
- minions.{{ grains.id }}
|