Commit d54ae089 authored by Ad Schellevis's avatar Ad Schellevis

(ids) template additions

parent 79d01d71
# logfilename [owner:group] mode count size when flags [/pid_file] [sig_num] # logfilename [owner:group] mode count size when flags [/pid_file] [sig_num]
{% if helpers.exists('OPNsense.IDS.general') and OPNsense.IDS.general.enabled|default("0") == "1"%} {% if helpers.exists('OPNsense.IDS.general') and OPNsense.IDS.general.enabled|default("0") == "1"%}
{% set intf = helpers.getNodeByTag('interfaces.'+OPNsense.IDS.general.interfaces.split(',')[0]).if %} {% set intf = helpers.getNodeByTag('interfaces.'+OPNsense.IDS.general.interfaces.split(',')[0]).if %}
/var/log/suricata/stats.log root:wheel 640 7 100 $D0 B /var/run/suricata_{{ intf }}.pid 1 /var/log/suricata/stats.log root:wheel 640 7 * $D0 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata.log root:wheel 640 7 100 $D0 B /var/run/suricata_{{ intf }}.pid 1 /var/log/suricata.log root:wheel 640 7 * $D0 B /var/run/suricata_{{ intf }}.pid 1
/var/log/suricata/eve.json root:wheel 640 4 100 $W0D23 B /var/run/suricata_{{ intf }}.pid 1 /var/log/suricata/eve.json root:wheel 640 4 * $W0D23 B /var/run/suricata_{{ intf }}.pid 1
{% endif %} {% endif %}
...@@ -13,7 +13,7 @@ suricata_interface="{{helpers.getNodeByTag('interfaces.'+intfName).if}}" ...@@ -13,7 +13,7 @@ suricata_interface="{{helpers.getNodeByTag('interfaces.'+intfName).if}}"
{# append additional interfaces #} {# append additional interfaces #}
suricata_flags="-D {% suricata_flags="-D {%
for intf in addFlags for intf in addFlags
%} -i {{ intf }} --pidfile /var/run/suricata_{{ intf }}.pid {% endfor %} -i {{ intf }} {% endfor
%} " %} "
{% else %} {% else %}
suricata_enable="NO" suricata_enable="NO"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment