CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 01:32:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

add placeholder for telegraf

Browse Source
This commit is contained in:
Mike Reeves
2024-01-29 15:53:54 -05:00
parent ab551a747d
commit 88d2ddba8b
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
salt/telegraf/scripts/oldpcap.sh
View File

@@ -5,13 +5,18 @@
# https://securityonion.net/license; you may not use this file except in compliance with the # https://securityonion.net/license; you may not use this file except in compliance with the
# Elastic License 2.0. # Elastic License 2.0.
{%- if pcap is steno
PCAPLOC=/host/nsm/pcap
{%- else %}
PCAPLOC=/host/nsm/suripcap
{%- endif %}
# if this script isn't already running # if this script isn't already running
if [[ ! "`pidof -x $(basename $0) -o %PPID`" ]]; then if [[ ! "`pidof -x $(basename $0) -o %PPID`" ]]; then
# Get the data # Get the data
OLDPCAP=$(find /host/nsm/pcap -type f -exec stat -c'%n %Z' {} + | sort | grep -v "\." | head -n 1 | awk {'print $2'}) OLDPCAP=$(find $PCAPLOC -type f -exec stat -c'%n %Z' {} + | sort | grep -v "\." | head -n 1 | awk {'print $2'})
DATE=$(date +%s) DATE=$(date +%s)
AGE=$(($DATE - $OLDPCAP)) AGE=$(($DATE - $OLDPCAP))