From 73d5b637ad98326724b5b29ec5bd6a7ab1131d48 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 11 Feb 2020 17:43:05 -0500
Subject: [PATCH] changes to helixeps script for telegraf

---
 salt/common/telegraf/scripts/helixeps.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/common/telegraf/scripts/helixeps.sh b/salt/common/telegraf/scripts/helixeps.sh
index d9d708499..eee4f65c3 100644
--- a/salt/common/telegraf/scripts/helixeps.sh
+++ b/salt/common/telegraf/scripts/helixeps.sh
@@ -13,12 +13,12 @@ if [ ! -z "$EVENTCOUNTCURRENT" ]; then
   fi
 
   echo "${EVENTCOUNTCURRENT}" > $PREVCOUNTFILE
-  EVENTS=$((EVENTCOUNTCURRENT - EVENTCOUNTPREVIOUS))
+  EVENTS=$(((EVENTCOUNTCURRENT - EVENTCOUNTPREVIOUS)/30))
   if [ "$EVENTS" -lt 0 ]; then
     EVENTS=0
   fi
 
-  echo "helixeps eps=${EVENTS}"
+  echo "helixeps eps=${EVENTS%%.*}"
 
 fi