From 0308e71eb5ab63e53211632a4e473fa2343b288f Mon Sep 17 00:00:00 2001 From: Dan Torrey Date: Tue, 29 Jun 2021 09:17:47 -0500 Subject: [PATCH] Add allowed_auxiliary_paths to default server.conf file --- misc/graylog.conf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/misc/graylog.conf b/misc/graylog.conf index 77a3fd028a84..1ad0df4c141e 100644 --- a/misc/graylog.conf +++ b/misc/graylog.conf @@ -723,3 +723,9 @@ proxied_requests_thread_pool_size = 32 # Configures the refresh interval for the monitored Prometheus exporter mapping files. # Default: 60s #prometheus_exporter_mapping_file_refresh_interval = 60s + +# Optional allowed paths for Graylog data files. If provided, certain operations in Graylog will only be permitted +# if the data file(s) are located in the specified paths (for example, with the CSV File lookup adapter). +# All subdirectories of indicated paths are allowed by default. This Provides an additional layer of security, +# and allows administrators to control where in the file system Graylog users can select files from. +#allowed_auxiliary_paths = /etc/graylog/data-files,/etc/custom-allowed-path