mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-15 21:52:47 +01:00
32 lines
1.6 KiB
Django/Jinja
32 lines
1.6 KiB
Django/Jinja
{# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
https://securityonion.net/license; you may not use this file except in compliance with the
|
|
Elastic License 2.0. #}
|
|
|
|
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
{% import_yaml 'elastalert/defaults.yaml' as ELASTALERTDEFAULTS %}
|
|
{% set elastalert_pillar = salt['pillar.get']('elastalert:config', {}) %}
|
|
|
|
|
|
{% do ELASTALERTDEFAULTS.elastalert.config.update({'es_host': GLOBALS.manager}) %}
|
|
{% do ELASTALERTDEFAULTS.elastalert.config.update({'es_username': pillar.elasticsearch.auth.users.so_elastic_user.user}) %}
|
|
{% do ELASTALERTDEFAULTS.elastalert.config.update({'es_password': pillar.elasticsearch.auth.users.so_elastic_user.pass}) %}
|
|
|
|
{% set ELASTALERTMERGED = salt['pillar.get']('elastalert', ELASTALERTDEFAULTS.elastalert, merge=True) %}
|
|
|
|
{% if 'ntf' in salt['pillar.get']('features', []) %}
|
|
{% set params = ELASTALERTMERGED.get('alerter_parameters', '') | load_yaml %}
|
|
{% if params != None and params | length > 0 %}
|
|
{% do ELASTALERTMERGED.config.update(params) %}
|
|
{% endif %}
|
|
|
|
{% if ELASTALERTMERGED.get('smtp_user', '') | length > 0 %}
|
|
{% do ELASTALERTMERGED.config.update({'smtp_auth_file': '/opt/elastalert/predefined/smtp_auth.yaml'}) %}
|
|
{% endif %}
|
|
|
|
{% if ELASTALERTMERGED.get('jira_user', '') | length > 0 or ELASTALERTMERGED.get('jira_key', '') | length > 0 %}
|
|
{% do ELASTALERTMERGED.config.update({'jira_account_file': '/opt/elastalert/predefined/jira_auth.yaml'}) %}
|
|
{% endif %}
|
|
|
|
{% endif %}
|