infosecn1nja
/
HELK
mirror of https://github.com/infosecn1nja/HELK.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add cluster settings

keyword-vs-text-changes
neu5ron 2019-05-20 18:58:54 -04:00
parent af774feaac
commit 42b71c83d9
1 changed files with 42 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
docker/helk-logstash/scripts/logstash-entrypoint.sh
View File

@ -79,6 +79,48 @@ for file in ${DIR}/*.json; do
done done
done done
# ******** Cluster Settings ***************
echo "[HELK-ES-DOCKER-INSTALLATION-INFO] Configuring elasticsearch cluster settings.."
while true; do
if [[ -n "$ELASTIC_PASSWORD" ]]; then
STATUS=$(curl -s -o /dev/null -w '%{http_code}' -u $ELASTIC_USERNAME:$ELASTIC_PASSWORD $ELASTICSEARCH_URL)
if [ $STATUS -eq 200 ]; then
curl -u $ELASTIC_USERNAME:$ELASTIC_PASSWORD -XPUT $ELASTICSEARCH_URL/_cluster/settings -H 'Content-Type: application/json' -d'
{
"persistent": {
"search.max_open_scroll_context": 15000,
"indices.breaker.request.limit" : "70%"
},
"transient": {
"search.max_open_scroll_context": 15000,
"indices.breaker.request.limit" : "70%"
}
}'
break
else
sleep 1
fi
else
STATUS=$(curl -s -o /dev/null -w '%{http_code}' $ELASTICSEARCH_URL)
if [ $STATUS -eq 200 ]; then
curl -XPUT $ELASTICSEARCH_URL/_cluster/settings -H 'Content-Type: application/json' -d'
{
"persistent": {
"search.max_open_scroll_context": 15000,
"indices.breaker.request.limit" : "70%"
},
"transient": {
"search.max_open_scroll_context": 15000,
"indices.breaker.request.limit" : "70%"
}
}'
break
else
sleep 1
fi
fi
done
# ********** Install Plugins ***************** # ********** Install Plugins *****************
echo "[HELK-LOGSTASH-DOCKER-INSTALLATION-INFO] Checking Logstash plugins.." echo "[HELK-LOGSTASH-DOCKER-INSTALLATION-INFO] Checking Logstash plugins.."
# Test a few to determine if probably all already installed # Test a few to determine if probably all already installed