Merge pull request #100 from V1D1AN/devel

Add Velociraptor monitoring
V1D1AN · Mar 11, 2023 · 6fb7ad6 · 6fb7ad6
2 parents 4ac4a87 + c4f4cb0
commit 6fb7ad6
Show file tree

Hide file tree

Showing 6 changed files with 18 additions and 4 deletions.
diff --git a/env.sample b/env.sample
@@ -43,4 +43,4 @@ EXCLUDE=\.tmp$
 MONITOR_FILE=close_write
 THE_HIVE_KEY=thehive_api_key
 THE_HIVE_HOST=https://s1em_hostname/thehive
-VELOX_SERVER_URL=https:://s1em_hosotname:8000/
+VELOX_SERVER_URL=https:://s1em_hostname:8000/
diff --git a/heartbeat/monitors.d/es01.yml b/heartbeat/monitors.d/es01.yml
@@ -3,5 +3,5 @@
   id: es01
   name: Es01
   hosts: ["es01"]
-  ports: [9200]
+  ports: [9200,9300]
   schedule: '@every 30s'
diff --git a/heartbeat/monitors.d/es02.yml b/heartbeat/monitors.d/es02.yml
@@ -3,5 +3,5 @@
   id: es02
   name: Es02
   hosts: ["es02"]
-  ports: [9200]
+  ports: [9200,9300]
   schedule: '@every 30s'
diff --git a/heartbeat/monitors.d/es03.yml b/heartbeat/monitors.d/es03.yml
@@ -3,5 +3,5 @@
   id: es03
   name: Es03
   hosts: ["es03"]
-  ports: [9200]
+  ports: [9300]
   schedule: '@every 30s'
diff --git a/heartbeat/monitors.d/velociraptor-upload.yml b/heartbeat/monitors.d/velociraptor-upload.yml
@@ -0,0 +1,7 @@
+- type: tcp
+  enabled: true
+  id: velociraptor
+  name: Velociraptor upload
+  hosts: ["velociraptor-upload"]
+  ports: [80]
+  schedule: '@every 30s'
diff --git a/heartbeat/monitors.d/velociraptor.yml b/heartbeat/monitors.d/velociraptor.yml
@@ -0,0 +1,7 @@
+- type: tcp
+  enabled: true
+  id: velociraptor
+  name: Velociraptor
+  hosts: ["velociraptor"]
+  ports: [8000,8001,8889]
+  schedule: '@every 30s'