Skip to content
Snippets Groups Projects
Commit c559e17c authored by Pavel Kácha's avatar Pavel Kácha
Browse files

More sensible configuration file defaults, some sections left commented to...

More sensible configuration file defaults, some sections left commented to prevent unnecessary default filtering and/or adding Node info
parent d3bd5ee0
No related branches found
No related tags found
No related merge requests found
// For all options see documentation
{ {
// Warden config can be also referenced as: // Warden config can be also referenced as:
// "warden": "/path/to/warden_client.cfg" // "warden": "/path/to/warden_client.cfg"
"warden": { "warden": {
"url": "https://example.com/warden3", "url": "https://example.com/warden3",
"cafile": "tcs-ca-bundle.pem", "cafile": "tcs-ca-bundle.pem",
"timeout": 10, "keyfile": "my.key.pem",
"errlog": {"level": "debug"}, "certfile": "my.cert.pem",
"timeout": 60,
"retry": 20,
"pause": 5,
"filelog": {"level": "debug"}, "filelog": {"level": "debug"},
"idstore": "myclient.id",
"name": "com.example.warden.test", "name": "com.example.warden.test",
"secret": "SeCrEt" "secret": "SeCrEt"
}, },
...@@ -16,41 +19,36 @@ ...@@ -16,41 +19,36 @@
// for Idea events to send out // for Idea events to send out
"dir": "warden_sender", "dir": "warden_sender",
// Optional filter fields, unmatched events are discarded (and removed) // Optional filter fields, unmatched events are discarded (and removed)
"filter": { //"filter": {
"cat": ["Test", "Recon.Scanning"], // "cat": ["Test", "Recon.Scanning"],
"nocat": null, // "nocat": null,
"group": ["cz.example"], // "group": ["cz.example"],
"nogroup": null, // "nogroup": null,
"tag": null, // "tag": null,
"notag": ["Honeypot"] // "notag": ["Honeypot"]
}, //},
// Optional information about detector to be prepended into Idea Node array // Optional information about detector to be prepended into Idea Node array
"node": { //"node": {
"Name": "cz.example.warden.test_sender", // "Name": "cz.example.warden.test_sender",
"Type": ["Relay"], // "Type": ["Relay"]
"SW": ["warden_filer-sender"], //}
"AggrWin": "00:05:00",
}
}, },
"receiver": { "receiver": {
// Maildir like directory, whose "incoming" will serve as target for events // Maildir like directory, whose "incoming" will serve as target for events
"dir": "warden_receiver", "dir": "warden_receiver",
// Optional filter fields for Warden query // Optional filter fields for Warden query
"filter": { //"filter": {
"cat": ["Test", "Recon.Scanning"], // "cat": ["Test", "Recon.Scanning"],
"nocat": null, // "nocat": null,
"group": ["cz.cesnet"], // "group": ["cz.cesnet"],
"nogroup": null, // "nogroup": null,
"tag": null, // "tag": null,
"notag": ["Honeypot"] // "notag": ["Honeypot"]
}, //},
// Optional information about detector to be prepended into Idea Node array // Optional information about detector to be prepended into Idea Node array
"node": { //"node": {
"Name": "cz.example.warden.test_receiver", // "Name": "cz.example.warden.test_receiver",
"Type": ["Relay"], // "Type": ["Relay"]
"SW": ["warden_filer-receiver"], //}
"AggrWin": "00:05:00",
"Note": "Test warden_filer receiver"
}
} }
} }
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment