Merge pull request #1274 from Security-Onion-Solutions/fix/zeek_syslog

Ensure Zeek syslog log is enabled for Import node
This commit is contained in:
weslambert
2020-08-31 13:08:44 -04:00
committed by GitHub

View File

@@ -1980,7 +1980,7 @@ zeek_logs_enabled() {
for BLOG in "${BLOGS[@]}"; do for BLOG in "${BLOGS[@]}"; do
echo " - $BLOG" | tr -d '"' >> "$zeeklogs_pillar" echo " - $BLOG" | tr -d '"' >> "$zeeklogs_pillar"
done done
elif [ "$install_type" == "EVAL" ]; then elif [ "$install_type" == "EVAL" ] || [ "$install_type" == "IMPORT" ]; then
printf '%s\n'\ printf '%s\n'\
" - conn"\ " - conn"\
" - dce_rpc"\ " - dce_rpc"\