ElastAlert: Sync Failed

[deanfourie1]

Version

2.4.170

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

4

RAM

32GB

Storage for /

130GB

Storage for /nsm

80GB

Network Traffic Collection

tap

Network Traffic Speeds

Less than 1Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

Yes, there are additional clues in /opt/so/log/ (please provide detail below)

Detail

Hi I am getting error with Syncing the rules.

ElastAlert: Sync Failed

This appears to be DNS related. I am not sure where 127.0.0.11 is,

Is there a way to change the DNS servers for SO?

I have confirmed that the machine has internet, I can update SO using sudo soup, so not sure why this is happening?

Any help appreciated.

failed to sync community rules Get "https://github.com/Security-Onion-Solutions/securityonion-resources/info/refs?service=git-upload-pack": dial tcp: lookup github.com on 127.0.0.11:53: read udp 127.0.0.1:34469->127.0.0.11:53: i/o timeout Get "https://github.com/Security-Onion-Solutions/securityonion-resources/info/refs?service=git-upload-pack": dial tcp: lookup github.com on 127.0.0.11:53: read udp 127.0.0.1:39750->127.0.0.11:53: i/o timeout Get "https://github.com/Security-Onion-Solutions/securityonion-resources/info/refs?service=git-upload-pack": dial tcp: lookup github.com on 127.0.0.11:53: read udp 127.0.0.1:41041->127.0.0.11:53: i/o timeout

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.