Commit d54ae089 authored by Ad Schellevis's avatar Ad Schellevis

(ids) template additions

parent 79d01d71
# logfilename [owner:group] mode count size when flags [/pid_file] [sig_num]
{% if helpers.exists('OPNsense.IDS.general') and OPNsense.IDS.general.enabled|default("0") == "1"%}
{% set intf = helpers.getNodeByTag('interfaces.'+OPNsense.IDS.general.interfaces.split(',')[0]).if %}
/var/log/suricata/stats.log root:wheel 640 7 100 $D0 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata.log root:wheel 640 7 100 $D0 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata/eve.json root:wheel 640 4 100 $W0D23 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata/stats.log root:wheel 640 7 * $D0 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata.log root:wheel 640 7 * $D0 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata/eve.json root:wheel 640 4 * $W0D23 B /var/run/suricata_{{ intf }}.pid 1
{% endif %}
......@@ -13,7 +13,7 @@ suricata_interface="{{helpers.getNodeByTag('interfaces.'+intfName).if}}"
{# append additional interfaces #}
suricata_flags="-D {%
for intf in addFlags
%} -i {{ intf }} --pidfile /var/run/suricata_{{ intf }}.pid {% endfor
%} -i {{ intf }} {% endfor
%} "
{% else %}
suricata_enable="NO"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment