mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 01:32:47 +01:00
Change EPS for Telegraf
This commit is contained in:
@@ -19,7 +19,7 @@ THEGREP=$(ps -ef | grep $0 | grep -v $$ | grep -v grep)
|
|||||||
|
|
||||||
if [ ! "$THEGREP" ]; then
|
if [ ! "$THEGREP" ]; then
|
||||||
|
|
||||||
FILES=$(ls -1x /host/nsm/faf/complete/ | wc -l)
|
FILES=$(ls -1x /host/nsm/strelka/unprocessed | wc -l)
|
||||||
|
|
||||||
echo "faffiles files=$FILES"
|
echo "faffiles files=$FILES"
|
||||||
else
|
else
|
||||||
|
|||||||
@@ -39,7 +39,7 @@ if [ ! "$THEGREP" ]; then
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
echo "consumptioneps eps=${EVENTS%%.*}"
|
echo "consumptioneps eps=${EVENTS%%.*}"
|
||||||
|
fi
|
||||||
else
|
else
|
||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
|
|||||||
@@ -38,6 +38,7 @@ if [ ! "$THEGREP" ]; then
|
|||||||
fi
|
fi
|
||||||
|
|
||||||
echo "helixeps eps=${EVENTS%%.*}"
|
echo "helixeps eps=${EVENTS%%.*}"
|
||||||
|
fi
|
||||||
else
|
else
|
||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
@@ -42,6 +42,7 @@ if [ ! "$THEGREP" ]; then
|
|||||||
LOSS=$(echo 4 k $DROPPED $TOTAL / p | dc)
|
LOSS=$(echo 4 k $DROPPED $TOTAL / p | dc)
|
||||||
echo "suridrop drop=$LOSS"
|
echo "suridrop drop=$LOSS"
|
||||||
fi
|
fi
|
||||||
|
fi
|
||||||
else
|
else
|
||||||
echo "suridrop drop=0"
|
echo "suridrop drop=0"
|
||||||
fi
|
fi
|
||||||
@@ -44,6 +44,7 @@ if [ ! "$THEGREP" ]; then
|
|||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
echo "$CURRENTTS" > $LASTCAPTURELOSSLOG
|
echo "$CURRENTTS" > $LASTCAPTURELOSSLOG
|
||||||
|
fi
|
||||||
else
|
else
|
||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
|
|||||||
@@ -42,6 +42,7 @@ if [ ! "$THEGREP" ]; then
|
|||||||
TOTAL=$((CURRENTPACKETS - PASTPACKETS))
|
TOTAL=$((CURRENTPACKETS - PASTPACKETS))
|
||||||
LOSS=$(echo 4 k $DROPPED $TOTAL / p | dc)
|
LOSS=$(echo 4 k $DROPPED $TOTAL / p | dc)
|
||||||
echo "zeekdrop drop=$LOSS"
|
echo "zeekdrop drop=$LOSS"
|
||||||
|
fi
|
||||||
else
|
else
|
||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
Reference in New Issue
Block a user