#!/bin/bash # # Copyright 2014,2015,2016,2017,2018,2019,2020,2021 Security Onion Solutions, LLC # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . #. /usr/sbin/so-elastic-common #. /etc/nsm/securityonion.conf # If logrotate script doesn't already exist, create it #FILE="/etc/logrotate.d/so-curator-closed-delete" #if ! [ -f ${FILE} ]; then # cat << EOF > ${FILE} #/var/log/nsm/so-curator-closed-delete.log { # daily # rotate 7 # copytruncate # compress # missingok # notifempty #} #EOF #fi # Avoid starting multiple instances APP=closeddelete lf=/tmp/$APP-pidLockFile # create empty lock file if none exists cat /dev/null >> $lf read lastPID < $lf # if lastPID is not null and a process with that pid exists , exit [ ! -z "$lastPID" -a -d /proc/$lastPID ] && exit echo $$ > $lf /usr/sbin/so-curator-closed-delete-delete