Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 10:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Change alarm summary email interval to 24hrs

Browse source
This commit is contained in:
Daniel Thayer 2012-05-31 17:30:48 -05:00
parent c5ae071500
commit 5f8cbf8a51
3 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/frameworks/cluster/nodes/manager.bro
View file

@ -15,6 +15,8 @@ redef Log::enable_remote_logging = F;
redef Log::default_rotation_interval = 1 hrs; redef Log::default_rotation_interval = 1 hrs;
redef Log::default_alarm_mail_interval = 24 hrs;
## Use the cluster's archive logging script. ## Use the cluster's archive logging script.
redef Log::default_rotation_postprocessor_cmd = "archive-log"; redef Log::default_rotation_postprocessor_cmd = "archive-log";

3
scripts/base/frameworks/logging/main.bro
View file

@ -60,6 +60,9 @@ export {
## Default rotation interval. Zero disables rotation. ## Default rotation interval. Zero disables rotation.
const default_rotation_interval = 0secs &redef; const default_rotation_interval = 0secs &redef;
## Default alarm mail interval. Zero disables alarm mails.
const default_alarm_mail_interval = 0secs &redef;
## Default naming format for timestamps embedded into filenames. ## Default naming format for timestamps embedded into filenames.
## Uses a ``strftime()`` style. ## Uses a ``strftime()`` style.
const default_rotation_date_format = "%Y-%m-%d-%H-%M-%S" &redef; const default_rotation_date_format = "%Y-%m-%d-%H-%M-%S" &redef;

2
scripts/base/frameworks/notice/actions/pp-alarms.bro
View file

@ -101,7 +101,7 @@ event bro_init()
# This replaces the standard non-pretty-printing filter. # This replaces the standard non-pretty-printing filter.
Log::add_filter(Notice::ALARM_LOG, Log::add_filter(Notice::ALARM_LOG,
[$name="alarm-mail", $writer=Log::WRITER_NONE, [$name="alarm-mail", $writer=Log::WRITER_NONE,
$interv=Log::default_rotation_interval, $interv=Log::default_alarm_mail_interval,
$postprocessor=pp_postprocessor]); $postprocessor=pp_postprocessor]);
} }