From 811bbb4cb0cf6439232bfdc674634c02bf4d3f8c Mon Sep 17 00:00:00 2001 From: Jason Ertel Date: Fri, 10 Jul 2020 12:49:12 -0400 Subject: [PATCH] Require sudo to run an import --- salt/common/tools/sbin/so-import-pcap | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/salt/common/tools/sbin/so-import-pcap b/salt/common/tools/sbin/so-import-pcap index 0c99ede64..d6815c450 100755 --- a/salt/common/tools/sbin/so-import-pcap +++ b/salt/common/tools/sbin/so-import-pcap @@ -17,7 +17,9 @@ {% set MASTER = salt['grains.get']('master') %} {% set VERSION = salt['pillar.get']('static:soversion') %} -{%- set MASTERIP = salt['pillar.get']('static:masterip') -%} +{% set MASTERIP = salt['pillar.get']('static:masterip') %} + +. /usr/sbin/so-common function usage { cat << EOF @@ -220,6 +222,6 @@ https://{{ MASTERIP }}/#/hunt?q=%2a%20%7C%20groupby%20event.module%20event.datas or you can manually set your Time Range to be: From: $START_OLDEST To: $END_NEWEST -Please note that it may take 30 seconds or more for events to appear in Kibana. +Please note that it may take 30 seconds or more for events to appear in Onion Hunt. EOF fi