mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-30 04:43:14 +01:00
46 lines
744 B
Plaintext
46 lines
744 B
Plaintext
{% set nodetype = salt['pillar_get']('node:node_type', 'storage') %}
|
|
|
|
base:
|
|
'G@role:so-sensor':
|
|
- common
|
|
- pcap
|
|
- suricata
|
|
- bro
|
|
- filebeat
|
|
|
|
'G@role:eval':
|
|
- common
|
|
- sensor
|
|
- master
|
|
- eval
|
|
|
|
'G@role:so-master':
|
|
- common
|
|
- master
|
|
- idstools
|
|
- redis
|
|
- elasticsearch
|
|
- logstash
|
|
|
|
'G@role:so-node':
|
|
{% if nodetype == 'parsing' %}
|
|
- common
|
|
- logstash
|
|
{% elsif nodetype == 'hot' %}
|
|
- common
|
|
- logstash
|
|
- elasticsearch
|
|
{% elseif nodetype == 'warm' %}
|
|
- common
|
|
- elasticsearch
|
|
{% elseif nodetype == 'storage' %}
|
|
- common
|
|
- logstash
|
|
- elasticsearch
|
|
{% endif %}
|
|
|
|
'G@role:mastersensor':
|
|
- common
|
|
- sensor
|
|
- master
|