cluster-template.json

{
  "id": "test",
  "modules": {
    "cloudtrail": {
      "enabled": true,
      "event_pattern": {
        "source": [
          "aws.ec2"
        ]
      }
    },
    "cloudwatch_monitoring": {
      "enabled": true
    },
    "flow_logs": {
      "enabled": true,
      "log_group_name": "test_logs",
      "subnets": [
        "subnet-id"
      ],
      "vpcs": [
        "vpc-id"
      ]
    },
    "kinesis": {
      "firehose": {
        "enabled": true,
        "s3_bucket_suffix": "streamalert.results"
      },
      "streams": {
        "retention": 36,
        "shards": 5
      }
    },
    "kinesis_events": {
      "enabled": true
    },
    "stream_alert": {
      "alert_processor": {
        "current_version": 7,
        "memory": 128,
        "outputs": {
          "aws-lambda": [
            "lolcats"
          ],
          "aws-s3": [
            "jacknagz.lolcats"
          ]
        },
        "timeout": 60,
        "vpc_config": {
          "security_group_ids": [
            "sg-id"
          ],
          "subnet_ids": [
            "subnet-id"
          ]
        }
      },
      "rule_processor": {
        "current_version": 8,
        "inputs": {
          "aws-sns": [
            "arn:aws:sns:region:account-id:topic-name"
          ]
        },
        "memory": 256,
        "timeout": 10
      }
    }
  },
  "outputs": {
    "kinesis": [
      "username",
      "access_key_id",
      "secret_key"
    ]
  },
  "region": "us-east-1"