-
Notifications
You must be signed in to change notification settings - Fork 21
/
win_pillar.example
36 lines (30 loc) · 992 Bytes
/
win_pillar.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
## populate the required fields for each returner needed
#hubblestack:
# returner:
# splunk:
# - token: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
# indexer: splunk-indexer.domain.tld
# index: hubble
# sourcetype_nova: hubble_audit
# sourcetype_nebula: hubble_osquery
# sourcetype_pulsar: hubble_fim
#slack_pulsar:
# as_user: true
# username: calculon
# channel: channel
# api_key: xoxb-xxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxx
## Use this section to enable pulsar
#beacons:
# pulsar:
# paths:
# - 'C:\salt\var\cache\salt\minion\files\base\hubblestack_pulsar\hubblestack_pulsar_win_config.yaml'
# interval: 30 # MUST be the same as win_notify_interval in file config
# disable_during_state_run: True
## Config for pulsar must be synced down separately
#schedule:
# cache_nebula:
# function: cp.cache_file
# seconds: 86400
# args:
# - salt://hubblestack_pulsar/hubblestack_pulsar_win_config.yaml
# return_job: False