CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

offline threshold check

Browse Source
This commit is contained in:
reyesj2
2025-09-09 15:39:55 -05:00
parent 8f36d2ec00
commit 29980ea958
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/manager/tools/sbin_jinja/so-elastic-agent-monitor
View File

@@ -145,6 +145,11 @@ main() {
offline_hours=$(calculate_offline_hours "$last_checkin") offline_hours=$(calculate_offline_hours "$last_checkin")
if [ "$offline_hours" -lt "$OFFLINE_THRESHOLD_HOURS" ]; then
log_message "INFO" "${agent_hostname^^} has been offline for ${offline_hours}h (threshold: ${OFFLINE_THRESHOLD_HOURS}h). Not logging ${agent_status^^} agent until it reaches threshold"
continue
fi
log_entry=$(echo 'null' | jq -c \ log_entry=$(echo 'null' | jq -c \
--arg ts "$current_timestamp" \ --arg ts "$current_timestamp" \
--arg id "$agent_id" \ --arg id "$agent_id" \