mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-06-26 12:18:13 +02:00
Josh Patterson
b09c3776b7
The SOC postgres database was renamed so_soc -> securityonion (see POSTGRES_DB in salt/postgres/enabled.sls and the SOC postgres config in salt/soc/defaults.yaml). The pillar_db beacon still hardcoded so_soc, so every poll failed with 'database "so_soc" does not exist' (rc=2), silently disabling active-push detection of audit_settings changes. Update DATABASE to 'securityonion' and refresh the now-stale so_soc references in the beacon and push_pillar reactor comments.