soc/soc-integrator/.env.example

APP_ENV=dev
LOG_LEVEL=INFO

SOC_INTEGRATOR_INTERNAL_KEY=change-me
SOC_INTEGRATOR_DB_HOST=soc-integrator-db
SOC_INTEGRATOR_DB_PORT=5432
SOC_INTEGRATOR_DB_NAME=soc_integrator
SOC_INTEGRATOR_DB_USER=soc_integrator
SOC_INTEGRATOR_DB_PASSWORD=soc_integrator_password

WAZUH_BASE_URL=https://wazuh.manager:55000
WAZUH_USERNAME=wazuh-wui
WAZUH_PASSWORD=MyS3cr37P450r.*-
WAZUH_INDEXER_URL=https://wazuh.indexer:9200
WAZUH_INDEXER_USERNAME=admin
WAZUH_INDEXER_PASSWORD=SecretPassword
WAZUH_AUTO_SYNC_ENABLED=true
WAZUH_AUTO_SYNC_INTERVAL_SECONDS=5
WAZUH_AUTO_SYNC_QUERY=*
WAZUH_AUTO_SYNC_LIMIT=50
WAZUH_AUTO_SYNC_MINUTES=120
LOG_LOSS_MONITOR_ENABLED=false
LOG_LOSS_MONITOR_INTERVAL_SECONDS=60
LOG_LOSS_MONITOR_WINDOW_MINUTES=5
LOG_LOSS_MONITOR_CREATE_IRIS_TICKET=false
LOG_LOSS_MONITOR_TICKET_COOLDOWN_SECONDS=900
C_DETECTION_ENABLED=true
C_DETECTION_WINDOW_MINUTES=30
C1_MAX_TRAVEL_SPEED_KMPH=900
C2_OFFHOURS_START_UTC=20
C2_OFFHOURS_END_UTC=6
C3_HOST_SPREAD_THRESHOLD=5
C3_SCAN_PORT_THRESHOLD=20
C_DETECTION_CREATE_IRIS_TICKET=true
C_DETECTION_TICKET_COOLDOWN_SECONDS=900
GEOIP_PROVIDER=ip-api
GEOIP_CACHE_TTL_SECONDS=21600

SHUFFLE_BASE_URL=http://shuffle-backend:5001
SHUFFLE_API_KEY=
SHUFFLE_USERNAME=
SHUFFLE_PASSWORD=

PAGERDUTY_BASE_URL=http://pagerduty-stub
PAGERDUTY_API_KEY=

IRIS_BASE_URL=https://iriswebapp_nginx:8443
IRIS_API_KEY=
IRIS_DEFAULT_CUSTOMER_ID=1
IRIS_DEFAULT_SOC_ID=
VIRUSTOTAL_API_KEY=
ABUSEIPDB_API_KEY=