Skip to content
This repository has been archived by the owner on Apr 16, 2021. It is now read-only.

Setup: use lowercase of hostname when creating sensornames #988

Closed
dougburks opened this issue Sep 2, 2016 · 4 comments
Closed

Setup: use lowercase of hostname when creating sensornames #988

dougburks opened this issue Sep 2, 2016 · 4 comments

Comments

@dougburks
Copy link
Contributor

No description provided.

@dougburks
Copy link
Contributor Author

dougburks commented Sep 2, 2016 •
edited
Loading

Scenario:
Sensor has a hostname of SENSOR1 (uppercase).
Setup currently forms a sensorname like SENSOR1-eth1.
If at some point the sensor has to be wiped and is reinstalled with the same hostname but lowercase (sensor1), then Sguil/Squert/MySQL will be inconsistent. Logging into the Sguil client will prompt for network to monitor and will show the OLD net-name (SENSOR1) which will then prevent any new alerts from being displayed. By forcing hostname to lowercase, we avoid case-sensitivity issues like this.

This was referenced Nov 9, 2016
Closed
Merged
@dougburks
Copy link
Contributor Author

commit:
Security-Onion-Solutions/securityonion-setup@df7b0d2

@dougburks
Copy link
Contributor Author

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/bYxMLoYfEdU/discussion

@dougburks
Copy link
Contributor Author

published:
http://blog.securityonion.net/2016/11/securityonion-setup-20120912.html

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@dougburks