From 7f7e5474edba1e16623fa6919eeef3547e0e4dd2 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Thu, 17 Nov 2022 10:43:05 -0500
Subject: [PATCH] Add more logging for filecheck monitoring, and ensure scripts
 are accessible to salt-relay

---
 salt/soc/files/bin/salt-relay.sh | 1 +
 salt/strelka/filecheck/filecheck | 6 +++++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/salt/soc/files/bin/salt-relay.sh b/salt/soc/files/bin/salt-relay.sh
index c4d0d0037..238e8ec29 100755
--- a/salt/soc/files/bin/salt-relay.sh
+++ b/salt/soc/files/bin/salt-relay.sh
@@ -7,6 +7,7 @@
 PIPE_OWNER=${PIPE_OWNER:-socore}
 PIPE_GROUP=${PIPE_GROUP:-socore}
 SOC_PIPE=${SOC_PIPE_REQUEST:-/opt/so/conf/soc/salt/pipe}
+PATH=${PATH}:/usr/sbin
 
 function log() {
   echo "$(date) | $1"
diff --git a/salt/strelka/filecheck/filecheck b/salt/strelka/filecheck/filecheck
index 3d498ce62..35bcc7f79 100644
--- a/salt/strelka/filecheck/filecheck
+++ b/salt/strelka/filecheck/filecheck
@@ -65,6 +65,8 @@ if __name__ == "__main__":
     event_handler =CreatedEventHandler()
 
     observer = Observer()
+
+    logging.info("Starting filecheck")
     observer.schedule(event_handler, extract_path, recursive=True)
     observer.start()
     try:
@@ -72,4 +74,6 @@ if __name__ == "__main__":
             time.sleep(1)
     except KeyboardInterrupt:
         observer.stop()
-    observer.join()
\ No newline at end of file
+    observer.join()
+
+    logging.info("Exiting filecheck")
\ No newline at end of file