From 03487c2a3145ae110dbfe9ee6ec6b1543e91d474 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Thu, 18 Feb 2021 14:06:45 -0500
Subject: [PATCH] change suricata clean cron to run once a day

---
 salt/suricata/init.sls | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/suricata/init.sls b/salt/suricata/init.sls
index 1a01d5e3a..d994b7393 100644
--- a/salt/suricata/init.sls
+++ b/salt/suricata/init.sls
@@ -192,8 +192,8 @@ clean_suricata_eve_files:
     - name: /usr/sbin/so-suricata-eve-clean > /dev/null 2>&1
     - identifier: clean_suricata_eve_files
     - user: root
-    - minute: '*/5'
-    - hour: '*'
+    - minute: '10'
+    - hour: '0'
     - daymonth: '*'
     - month: '*'
     - dayweek: '*'