CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-27 06:57:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

ensure at least 2 eve files are kept https://github.com/Security-Onion-Solutions/securityonion/issues/2989

Browse Source
This commit is contained in:
m0duspwnens
2021-02-18 09:51:40 -05:00
parent 4b07d5e457
commit 74ca4487de
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/suricata/cron/so-suricata-eve-clean
+3
View File
@@ -25,6 +25,9 @@ read lastPID < $lf
echo $$ > $lf echo $$ > $lf
MAXEVES={{ salt['pillar.get']('suricata:cleanup:eve_json', 20) }} MAXEVES={{ salt['pillar.get']('suricata:cleanup:eve_json', 20) }}
if [ "$MAXEVES" -lt 2 ]; then
MAXEVES=2
fi
# Find eve files and remove them # Find eve files and remove them
NUMEVES=$(find /nsm/suricata/ -type f -name "eve-*.json" | wc -l) NUMEVES=$(find /nsm/suricata/ -type f -name "eve-*.json" | wc -l)