config

package
v0.0.0-...-5f17d81 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 22, 2025 License: AGPL-3.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	REPLACE_KEY string

	DependUrl        = "https://%s:%s/private/dependencies/agent/%s"
	AgentManagerPort = "9000"
	LogAuthProxyPort = "50051"
	DependenciesPort = "9001"

	ServiceLogFile      = filepath.Join(utils.GetMyPath(), "logs", "utmstack_agent.log")
	ModulesServName     = "UTMStackModulesLogsCollector"
	WinServName         = "UTMStackWindowsLogsCollector"
	CollectorFileName   = filepath.Join(utils.GetMyPath(), "log-collector-config.json")
	UUIDFileName        = filepath.Join(utils.GetMyPath(), "uuid.yml")
	ConfigurationFile   = filepath.Join(utils.GetMyPath(), "config.yml")
	PortRangeMin        = "7000"
	PortRangeMax        = "9000"
	RetentionConfigFile = filepath.Join(utils.GetMyPath(), "retention.json")
	LogsDBFile          = filepath.Join(utils.GetMyPath(), "logs_process", "logs.db")
	CertPath            = filepath.Join(utils.GetMyPath(), "certs", "utm.crt")
	VersionPath         = filepath.Join(utils.GetMyPath(), "version.json")
	UpdaterSelfLinux    = "utmstack_updater_self"

	// TLS Configuration for Integrations
	IntegrationCertPath = filepath.Join(utils.GetMyPath(), "certs", "integration.crt")
	IntegrationKeyPath  = filepath.Join(utils.GetMyPath(), "certs", "integration.key")
	IntegrationCAPath   = filepath.Join(utils.GetMyPath(), "certs", "integration-ca.crt")

	DataTypeWindowsAgent        DataType = "wineventlog"
	DataTypeSyslog              DataType = "syslog"
	DataTypeVmware              DataType = "vmware-esxi"
	DataTypeLinuxAgent          DataType = "linux"
	DataTypeEset                DataType = "antivirus-esmc-eset"
	DataTypeKaspersky           DataType = "antivirus-kaspersky"
	DataTypeTraefikModule       DataType = "traefik"
	DataTypeMongodbModule       DataType = "mongodb"
	DataTypeMysqlModule         DataType = "mysql"
	DataTypePostgresqlModule    DataType = "postgresql"
	DataTypeRedisModule         DataType = "redis"
	DataTypeElasticsearchModule DataType = "elasticsearch"
	DataTypeKafkaModule         DataType = "kafka"
	DataTypeKibanaModule        DataType = "kibana"
	DataTypeLogstashModule      DataType = "logstash"
	DataTypeCiscoAsa            DataType = "firewall-cisco-asa"
	DataTypeCiscoMeraki         DataType = "firewall-meraki"
	DataTypeFortinet            DataType = "firewall-fortigate-traffic"
	DataTypePaloalto            DataType = "firewall-paloalto"
	DataTypeMikrotik            DataType = "firewall-mikrotik"
	DataTypeCiscoFirepower      DataType = "firewall-cisco-firepower"
	DataTypeSophosXG            DataType = "firewall-sophos-xg"
	DataTypeCiscoSwitch         DataType = "cisco-switch"
	DataTypeSonicwall           DataType = "firewall-sonicwall"
	DataTypeNatsModule          DataType = "nats"
	DataTypeDeceptivebytes      DataType = "deceptive-bytes"
	DataTypeOsqueryModule       DataType = "osquery"
	DataTypeLinuxAuditdModule   DataType = "auditd"
	DataTypeHaproxyModule       DataType = "haproxy"
	DataTypeNginxModule         DataType = "nginx"
	DataTypeIisModule           DataType = "iis"
	DataTypeApacheModule        DataType = "apache"
	DataTypeSentinelOne         DataType = "antivirus-sentinel-one"
	DataTypeCiscoGeneric        DataType = "cisco"
	DataTypeMacOs               DataType = "macos"
	DataTypeGeneric             DataType = "generic"
	DataTypeNetflow             DataType = "netflow"
	DataTypeAix                 DataType = "ibm-aix"
	DataTypePfsense             DataType = "firewall-pfsense"
	DataTypeFortiweb            DataType = "firewall-fortiweb"
	DataTypeSuricata            DataType = "suricata"

	ProtoPorts = map[DataType]ProtoPort{
		DataTypeSyslog:         {UDP: "7014", TCP: "7014"},
		DataTypeVmware:         {UDP: "7002", TCP: "7002"},
		DataTypeEset:           {UDP: "7003", TCP: "7003"},
		DataTypeKaspersky:      {UDP: "7004", TCP: "7004"},
		DataTypeCiscoGeneric:   {UDP: "514", TCP: "1470"},
		DataTypeFortinet:       {UDP: "7005", TCP: "7005"},
		DataTypePaloalto:       {UDP: "7006", TCP: "7006"},
		DataTypeMikrotik:       {UDP: "7007", TCP: "7007"},
		DataTypeSophosXG:       {UDP: "7008", TCP: "7008"},
		DataTypeSonicwall:      {UDP: "7009", TCP: "7009"},
		DataTypeDeceptivebytes: {UDP: "7010", TCP: "7010"},
		DataTypeSentinelOne:    {UDP: "7012", TCP: "7012"},
		DataTypeAix:            {UDP: "7016", TCP: "7016"},
		DataTypePfsense:        {UDP: "7017", TCP: "7017"},
		DataTypeFortiweb:       {UDP: "7018", TCP: "7018"},
		DataTypeSuricata:       {UDP: "7019", TCP: "7019"},
		DataTypeNetflow:        {UDP: "2055", TCP: ""},
	}

	ProhibitedPortsChange = []DataType{DataTypeCiscoGeneric, DataTypeNetflow}
)
View Source
var (
	UpdaterSelf = "utmstack_updater_self%s"
	ServiceFile = "utmstack_agent_service%s"
	DependFiles = []string{"utmstack_agent_dependencies_linux.zip"}
)

Functions

func GenerateNewUUID

func GenerateNewUUID() (string, error)

func GetUUID

func GetUUID() (string, error)

func SaveConfig

func SaveConfig(cnf *Config) error

func ValidateModuleType

func ValidateModuleType(typ string) string

Types

type Config

type Config struct {
	Server             string `yaml:"server"`
	AgentID            uint   `yaml:"agent-id"`
	AgentKey           string `yaml:"agent-key"`
	SkipCertValidation bool   `yaml:"insecure"`
}

func GetCurrentConfig

func GetCurrentConfig() (*Config, error)

func GetInitialConfig

func GetInitialConfig() (*Config, string)

type DataType

type DataType string

type InstallationUUID

type InstallationUUID struct {
	UUID string `yaml:"uuid"`
}

type MSGDS

type MSGDS struct {
	DataSource string
	Message    string
}

type ProtoPort

type ProtoPort struct {
	UDP string
	TCP string
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL