trouble adding custom zeek script #1674
Replies: 1 comment
-
You will want to make your changes on the manager in the global or minion pillar file at /opt/so/saltstack/local/pillar/. There is a good description on how to do that here https://docs.securityonion.net/en/latest/zeek.html?highlight=local.zeek#configuration. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
I'm probably doing/missing something really silly, but when I run so-zeek-restart after modifying /opt/so/conf/zeek/local.zeek to load a custom script, local.zeek gets reset to default and my changes are gone.
EDIT: Security Onion 2.3.0
Beta Was this translation helpful? Give feedback.
All reactions