From 87cc389088eb0f1886c73610f70e3701eb625d20 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Wed, 27 Sep 2023 15:36:13 -0400
Subject: [PATCH] deb OS doesn't use /var/log/cron, skip

---
 salt/common/tools/sbin/so-log-check | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/salt/common/tools/sbin/so-log-check b/salt/common/tools/sbin/so-log-check
index 621f0027a..d377d0236 100755
--- a/salt/common/tools/sbin/so-log-check
+++ b/salt/common/tools/sbin/so-log-check
@@ -178,7 +178,9 @@ done
 
 # Check Security Onion related log files
 find /opt/so/log/ /nsm -name \*.log > /tmp/log_check_files
-echo "/var/log/cron" >> /tmp/log_check_files
+if [[ -f /var/log/cron ]]; then
+    echo "/var/log/cron" >> /tmp/log_check_files
+fi
 exclude_log "kibana.log"
 exclude_log "spool"
 exclude_log "import"