Merge pull request #8329 from Security-Onion-Solutions/fix/elastalert_stop_check_enabled

Check to ensure Elastalert is enabled and suppress missing container error output
This commit is contained in:
weslambert
2022-07-19 13:27:35 -04:00
committed by GitHub

View File

@@ -374,10 +374,9 @@ clone_to_tmp() {
elastalert_indices_check() { elastalert_indices_check() {
# Stop Elastalert to prevent Elastalert indices from being re-created # Stop Elastalert to prevent Elastalert indices from being re-created
so-elastalert-stop if grep -q "^so-elastalert$" /opt/so/conf/so-status/so-status.conf ; then
so-elastalert-stop || true
# Deleting Elastalert indices to prevent issues with upgrade to Elastic 8 ## fi
echo "Deleting Elastalert indices to prevent issues with upgrade to Elastic 8..."
# Wait for ElasticSearch to initialize # Wait for ElasticSearch to initialize
echo -n "Waiting for ElasticSearch..." echo -n "Waiting for ElasticSearch..."
@@ -403,8 +402,9 @@ elastalert_indices_check() {
echo echo
exit 1 exit 1
fi fi
# Check Elastalert indices # Check Elastalert indices
echo "Deleting Elastalert indices to prevent issues with upgrade to Elastic 8..."
CHECK_COUNT=0 CHECK_COUNT=0
while [[ "$CHECK_COUNT" -le 2 ]]; do while [[ "$CHECK_COUNT" -le 2 ]]; do
# Delete Elastalert indices # Delete Elastalert indices