CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8288 from Security-Onion-Solutions/fix/soup_elastalert_indices_deletion_check

Browse Source 
Ensure Elastalert indices are deleted before continuing with SOUP
This commit is contained in:
weslambert
2022-07-13 08:44:04 -04:00
committed by GitHub
parent d7eb8b9bcb 8e92060c29
commit fa894cf83b
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
salt/common/tools/sbin/soup
View File

@@ -851,6 +851,13 @@ up_to_2.3.140() {
# Delete Elastalert indices # Delete Elastalert indices
for i in $(so-elasticsearch-query _cat/indices | grep elastalert | awk '{print $3}'); do so-elasticsearch-query $i -XDELETE; done for i in $(so-elasticsearch-query _cat/indices | grep elastalert | awk '{print $3}'); do so-elasticsearch-query $i -XDELETE; done
# Check to ensure Elastalert indices have been deleted
RESPONSE=$(so-elasticsearch-query elastalert*)
if [[ "$RESPONSE" == "{}" ]]; then
echo "Elastalert indices have been deleted."
else
fail "Something went wrong. Could not delete the Elastalert indices. Exiting."
fi
## ##
INSTALLEDVERSION=2.3.140 INSTALLEDVERSION=2.3.140
} }