# This file contains the default configuration for the Waratek Agent.
# Please refer to Waratek documentation for full details on Agent configuration options.

######################### WARATEK GLOBAL SETTINGS #########################
# Used for more verbose output during agent startup. May be removed or set to false for Production usage.
com.waratek.ShowStart=true

######################### PORTAL #########################
# Set to true when the Waratek Agent is being used with the Portal.
# Set to false if running the Waratek Agent in headless mode, i.e. no Portal.
com.waratek.ControllerPresent=true

# Set the listening port for the Portal. Mandatory when using the Portal Dedicated.
com.waratek.ControllerPort=8443

# Set to the IP Address or FQDN of the Portal server. Mandatory when using the Portal Dedicated.
com.waratek.ControllerHost=[IP Address or FQDN of Portal]

# Set this value for automatic assignment to the relevant Application listed in the Portal.
com.waratek.ControllerKey=[key token from Portal Application]

# Set the Agent name as it is to appear on the Portal
#com.waratek.agent.name=[agent name]

# Set to true if connecting to the Portal via HTTPS. Mandatory when using the Portal.
com.waratek.ControllerSecure=true

# Set to true if using a self-signed or CA signed certificate.
# Set to false if using the Waratek provided certificate.
# NOTE: Waratek certificates are for testing purposes only and MUST NOT be used in a production environment.
com.waratek.ControllerSSLCertificateValidation=false

# Specify Instance startup behaviour when the Portal is not available.
#com.waratek.ControllerUnavailableAction=fail | retry | ignore

# Set these flags when connecting to the Portal and using the Waratek keystore.
#com.waratek.trustStore=[/path/to/war_keystore.jks]
#com.waratek.trustStorePassword=[password]
#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


######################### ELASTICSEARCH SETTINGS #########################
# Set to true if Elasticsearch is being used to store security events.
com.waratek.ElasticsearchPresent=true

# Set to true for https; false for http
com.waratek.ElasticsearchSecure=false

# Set to the IP or FQDN of the Elasticsearch instance.
com.waratek.ElasticsearchHost=[IP Address or FQDN of Elasticsearch server]

# Set the listening port for Elasticsearch.
com.waratek.ElasticsearchPort=9200

# Set the username for Elasticsearch
com.waratek.ElasticsearchUsername=instance

# Set the password for Elasticsearch
com.waratek.ElasticsearchPassword=Testpass123

# Optionally, specify the prefix for the index used for posting security events.
#com.waratek.ElasticsearchIndex=event
#+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


######################### LOGGING AND RULES #########################
# Location of the Waratek security events file. Absolute and relative path locations are supported.
# NOTE: If unset, logging is turned off. If set, then the file is automatically created.
com.waratek.log.file=events.log

# Maximum file size (in KB, MB, GB) for the security log file. Once max size is reached, rollover to a new file will occur.
# e.g. events.log.1, events.log.2 etc.
com.waratek.log.file.maxsize=20MB

# Location for logging security events. May be local, remote or both.
#com.waratek.log.mode=local

# Mandatory if com.waratek.log.mode=remote or both; ignored if com.waratek.log.mode=local.
# May be a fully qualified domain name or IP address.
#com.waratek.log.host=[IP Address or FQDN of the Logging server]

# Maximum number of backed up security log files that will be created.
#com.waratek.log.file.maxindex=99

# Set whether or not the security log file should be rotated daily. May be true or false.
#com.waratek.log.file.rotatedaily=false

# Location of the Waratek ARMR rules file. Absolute and relative path locations are supported.
com.waratek.rules.local=rules.armr

# Enable auto reloading of rules if they change without needing a restart.
com.waratek.rules.autoreload=true
#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++