sec

Install and configure SEC (Simple Event Correlator)

CERIT Scientific Cloud

ceritsc

8,859 downloads

8,408 latest version

3.1 quality score

Version information

  • 0.9.2 (latest)
  • 0.9.1
  • 0.9.0
released Dec 8th 2014
This version is compatible with:
  • Puppet Enterprise 3.3.x
  • Puppet 3.3
  • RedHat, CentOS, Debian, Ubuntu

Start using this module

Tags: sec

Documentation

ceritsc/sec — version 0.9.2 Dec 8th 2014

Puppet SEC module

This module manages SEC (simple event correlator, http://simple-evcorr.sourceforge.net/ ) installation, configuration and startup.

Overview

This is the Puppet SEC module.

Requirements

Module has been tested on:

  • Puppet 3.3
  • Debian and RHEL/CentOS 6

Required modules:

Quick Start

Install and start SEC with default config:

include sec

Full configuration options:

class { 'sec':
  enabled     => true|false,  # enable state
  packages    => [...],       # override list of packages to install
  service     => '...',       # override service name
  include_dir => '...',       # directory for Sec rules
  purge       => true|false,  # include_dir purge orphaned files
  recurse     => true|false,  # include_dir recurse
  inputs      => [...],       # list of input log files
  daemon_args => '...',       # ERB inline template with daemon args.
}

SEC rule options:

sec::rule { name
  ensure   => present|absent,
  rulename => $title,
  content  => '...',
}

CERIT Scientific Cloud, support@cerit-sc.cz