This module manages SEC (simple event correlator, http://simple-evcorr.sourceforge.net/ ) installation, configuration and startup.
This is the Puppet SEC module.
Module has been tested on:
- Puppet 3.3
- Debian and RHEL/CentOS 6
Required modules:
Install and start SEC with default config:
include sec
Full configuration options:
class { 'sec':
enabled => true|false, # enable state
packages => [...], # override list of packages to install
service => '...', # override service name
include_dir => '...', # directory for Sec rules
purge => true|false, # include_dir purge orphaned files
recurse => true|false, # include_dir recurse
inputs => [...], # list of input log files
daemon_args => '...', # ERB inline template with daemon args.
}
SEC rule options:
sec::rule { name
ensure => present|absent,
rulename => $title,
content => '...',
}
CERIT Scientific Cloud, [email protected]