mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
26 lines
567 B
YAML
26 lines
567 B
YAML
{%- if grains.role == 'so-sensor' -%}
|
|
{%- set mainint = salt['pillar.get']('sensor:mainint') %}
|
|
{%- set ip = salt['grains.get']('ip_interfaces:' ~ mainint[0], salt['pillar.get']('sensor:mainip')) %}
|
|
{%- else %}
|
|
{%- set ip = salt['pillar.get']('global:managerip') %}
|
|
{%- endif -%}
|
|
conn:
|
|
server: '{{ ip }}:57314'
|
|
cert: ''
|
|
timeout:
|
|
dial: 5s
|
|
file: 1m
|
|
throughput:
|
|
concurrency: 8
|
|
chunk: 32768
|
|
delay: 0s
|
|
files:
|
|
patterns:
|
|
- '/nsm/strelka/*'
|
|
delete: false
|
|
gatekeeper: true
|
|
response:
|
|
report: 5s
|
|
delta: 5s
|
|
staging: '/nsm/strelka/processed'
|