-
Version2.4.100 Installation MethodSecurity Onion ISO image Descriptionconfiguration Installation TypeDistributed Locationairgap Hardware SpecsMeets minimum requirements CPU8 RAM32 Storage for /163GB Storage for /nsm2TB Network Traffic Collectionspan port Network Traffic Speeds1Gbps to 10Gbps StatusYes, all services on all nodes are running OK Salt StatusNo, there are no failures LogsNo, there are no additional clues DetailI support a project where we deploy/tear-down cyber range environments for test and training. We support deploying Security Onion into those environments. I recently updated our Security Onion logic from 2.3.90 to 2.4.100. My question relates to grid membership in distributed mode. In 2.3, grid members could automatically be added based on credentials. In 2.4 is there any way to auto authenticate/accept pending grid members? I need to avoid the manual action of accepting grid members through the SOC web gui if at all possible. Again, this is not a production environment, so even less than secure methods would be acceptable. Guidelines
|
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
The However, investigating that let me to the so-minion command. Running This is sufficient to accomplish what I needed. Thanks for pointing me in the right direction. |
Beta Was this translation helpful? Give feedback.
The
salt-key -A -ycommand definitely got the sensor added as a grid member, but did didn't trigger necessary changes on the sensor. After waiting about an hour, runningso-statuson the sensor still resulted in the output "so-status is not yet available"However, investigating that let me to the so-minion command. Running
so-minion -o=liston the manager gives a list of pending minions. Then runningso-minion -o=add -m=<id>for each one listed in category "minion_pre" adds the sensor to the grid and triggers the remaining setup tasks.This is sufficient to accomplish what I needed. Thanks for pointing me in the right direction.