mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
26 lines
863 B
Plaintext
26 lines
863 B
Plaintext
# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
# or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
# https://securityonion.net/license; you may not use this file except in compliance with the
|
|
# Elastic License 2.0.
|
|
|
|
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
{% from 'pcap/config.map.jinja' import PCAPMERGED %}
|
|
|
|
include:
|
|
{% if PCAPMERGED.enabled and GLOBALS.role != 'so-import'%}
|
|
- pcap.enabled
|
|
{% elif GLOBALS.role == 'so-import' %}
|
|
- pcap.config
|
|
- pcap.disabled
|
|
{% else %}
|
|
- pcap.disabled
|
|
{% endif %}
|
|
|
|
# This directory needs to exist regardless of whether STENO is enabled or not, in order for
|
|
# Sensoroni to be able to look at old steno PCAP data
|
|
pcapdir:
|
|
file.directory:
|
|
- name: /nsm/pcap
|
|
- user: 941
|
|
- group: 941
|
|
- makedirs: True |