google / google/osdfir-infrastructure
Enable automatic DFIQ integration between Yeti and Timesketch
Open
enhancement
- Dominant language
- Go Template
- Stars
- 213
- Forks
- 30
- Avg merge
- 14h 33m
- Merged PRs (30d)
- 5
Description
### Name and Version
charts/timesketch and charts/yeti
### What is the problem this feature will solve?
Furthering automated integration for Yeti and Timesketch
### What is the feature you are proposing to solve the problem?
In timesketch configs, enable Yeti DFIQ configs. Specifically DFIQ_ENABLED and YETI_DFIQ_ENABLED to True somewhere here: https://github.com/google/osdfir-infrastructure/blob/main/charts/osdfir-infrastructure/charts/timesketch/templates/init-configmap.yaml#L93
In Yeti:
* Enabling DFIQFeed and Timesketch feed at runtime.
### What alternatives have you considered?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.