forked from hubblestack/hubble-salt
-
Notifications
You must be signed in to change notification settings - Fork 0
/
pillar.example
35 lines (29 loc) · 900 Bytes
/
pillar.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
## populate the required fields for each returner needed
#hubblestack:
# returner:
# splunk:
# - token: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
# indexer: splunk-indexer.domain.tld
# index: hubble
# sourcetype_nova: hubble_audit
# sourcetype_nebula: hubble_osquery
# sourcetype_pulsar: hubble_fim
#slack_pulsar:
# as_user: true
# username: calculon
# channel: channel
# api_key: xoxb-xxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxx
## Use this section to enable pulsar
#beacons:
# pulsar:
# paths:
# - /var/cache/salt/minion/files/base/hubblestack_pulsar/hubblestack_pulsar_config.yaml
# disable_during_state_run: True
## Config for pulsar must be synced down separately
#schedule:
# cache_nebula:
# function: cp.cache_file
# seconds: 86400
# args:
# - salt://hubblestack_pulsar/hubblestack_pulsar_config.yaml
# return_job: False