[SOLVED] Suricata Update Crontab Entry

[mw01]

Suricata update did not occur.  The System Settings Cron entry is enabled.  Found "/usr/local/sbin/configctl ids update" missing in "/var/cron/tabs/root".  Tried Suricata Edit job, save, no joy.  Entry made with "crontab -e".

[franco]

It's under /var/cron/tabs/nobody if it exists. Also check your System: Settings: Cron config.

[mw01]

Thank you.  The ids rule updates entry is in /var/cron/tabs/nobody.  I had clicked the edit and save (System Cron Settings) before checking.  I returned /var/cron/tabs/root to normal and will check for updates in the morning.

[mw01]

Rules updated as scheduled.  Must have been a glitch.  Remote persistent syslog is good.

[franco]

Ok, great to hear.


Happy new year,
Franco