so-rule-update cron job is not working

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

https://securityonion.net

3.22k stars 497 forks source link

so-rule-update cron job is not working #1056

Closed dougburks closed 4 years ago

dougburks commented 4 years ago

Reference: https://www.reddit.com/r/securityonion/comments/hv9xjw/20_suricata_rule_never_be_updated_by_cron_job/

so-rule-update works fine when run interactively. However, when running from cron job, /opt/so/log/idstools/download.log shows:

the input device is not a TTY

We need to change docker options so that it doesn't require an interactive TTY.

dougburks commented 4 years ago

https://github.com/Security-Onion-Solutions/securityonion/commit/283f91459aae043ccfc40a230cba0d3873fb2f22