From 2fc15d4dced3e2be05a1b0c9eeb689967637d1c3 Mon Sep 17 00:00:00 2001 From: SG Date: Fri, 18 Nov 2022 12:28:18 -0700 Subject: [PATCH] idaholab/Malcolm#127, have install.py --configure ask about other storage locations for PCAP, zeek logs and opensearch indices --- scripts/install.py | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/scripts/install.py b/scripts/install.py index 9274ab630..447206e43 100755 --- a/scripts/install.py +++ b/scripts/install.py @@ -1234,6 +1234,24 @@ def tweak_malcolm_runtime( sectionIndents[currentSection] * 3, ) + elif currentService == 'file-monitor': + # stuff specifically in the file-monitor section + if re.match(r'^\s*-.+:/zeek/extract_files(:.+)?\s*$', line): + # file-monitor's reference to the zeek-logs/extract_files directory + line = ReplaceBindMountLocation( + line, + os.path.join(zeekLogDir, 'extract_files'), + sectionIndents[currentSection] * 3, + ) + + elif re.match(r'^\s*-.+:/zeek/logs(:.+)?\s*$', line): + # zeek's reference to the zeek-logs/current directory + line = ReplaceBindMountLocation( + line, + os.path.join(zeekLogDir, 'current'), + sectionIndents[currentSection] * 3, + ) + elif currentService == 'logstash': # stuff specifically in the logstash section if 'LS_JAVA_OPTS' in line: