Skip to content
This repository has been archived by the owner on Apr 16, 2021. It is now read-only.

snorby dashboard not updating #199

Closed
GoogleCodeExporter opened this issue Mar 24, 2015 · 19 comments
Closed

snorby dashboard not updating #199

GoogleCodeExporter opened this issue Mar 24, 2015 · 19 comments

Comments

@GoogleCodeExporter
Copy link

What steps will reproduce the problem?
1.snorby dashboard is not updating after the change of time zone
2. See: https://github.com/Snorby/snorby/issues/54
3.

What is the expected output? What do you see instead?

I know that it dose depend of you but people could write abut it 

What version of the product are you using?
(grep VERSION /etc/nsm/securityonion.conf)

ENGINE=snort
VERSION=20120116
DAYSTOKEEP=365

Please provide any additional information below.

Original issue reported on code.google.com by pawelsko...@gmail.com on 19 Jan 2012 at 9:25

@GoogleCodeExporter
Copy link
Author

"I know that it dose depend of you but people could write abut it"

I'm not sure what you mean.  Please clarify.

Original comment by doug.bu...@gmail.com on 19 Jan 2012 at 10:02

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

I know that people will write to you that something dose work in system. It is 
not your fault. This application has serious bug. Your system is grate. When 
you will be in Ireland give me call. 

Original comment by pawelsko...@gmail.com on 19 Jan 2012 at 10:56

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

I tried this tip. It looks like that it works for me at the moment

Tip : if, at any given time, the dashboard continues to show 0 events (or an 
incorrect number of events in general), but the Events view shows that all 
entries are inside the database, then you may have to clear the caches and 
rebuild it from scratch :

mysql -u root -p

use snorby;
truncate table caches;
exit

Now remove the 2 worker jobs (use the little trash can icon next to each worker 
job to remove the job)

Recreate the jobs via Worker Options, and the main dashboard should eventually 
get populated again.


http://www.corelan.be/index.php/2011/02/27/cheat-sheet-installing-snorby-2-2-wit
h-apache2-and-suricata-with-barnyard2-on-ubuntu-10-x/

Original comment by pawelsko...@gmail.com on 19 Jan 2012 at 11:34

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

2.3.13 now available:
https://github.com/Snorby/snorby/blob/master/ChangeLog.md

Original comment by doug.bu...@gmail.com on 5 Feb 2012 at 7:32

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

[deleted comment]

6 similar comments
@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

[deleted comment]

@GoogleCodeExporter
Copy link
Author

I have the same problem with snorby. I noticed that there's a 20120207 version 
with update script in sourceforge. Is this version already for production use? 
The update script in the files folder still reflects the 20120202 version.

Original comment by Wilbert....@gmail.com on 9 Feb 2012 at 9:49

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

Hi Wilbert,

20120207 is NOT ready for production use.  Our testing has shown an issue with 
large Snorby databases where the cache job spins for hours.  We're working with 
the Snorby team to troubleshoot.  Once we have the issue resolved, I'll publish 
the update to the files folder and send a notice via blog/twitter/mailing list.

Thanks,
Doug

Original comment by doug.bu...@gmail.com on 9 Feb 2012 at 10:46

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

sed -i 's| |=|g' $CONF
source $CONF
if [ "$VERSION" = "20120202" ]; then
        NEW="20120222"
        echo "**********************************************"   | $LOGGER
        echo "* Upgrading from $VERSION to $NEW."               | $LOGGER
        echo "**********************************************"   | $LOGGER
        DIR="/nsm/backup/$NEW"
        mkdir -p $DIR                                           | $LOGGER
        cd $DIR

    if [ -d /var/lib/mysql/snorby ]; then
        echo "* Stopping Snorby processes"      | $LOGGER
        ps aux |grep "thi[n]" |awk '{print $2}'|xargs kill
        ps aux |grep "dela[y]" |awk '{print $2}'|xargs kill
    fi

    SNORBYHOME=/usr/local/share/snorby
    echo "* Backing up Snorby config files"         | $LOGGER
    cp $SNORBYHOME/config/snorby_config.yml .
    cp $SNORBYHOME/config/database.yml .

    echo "* Updating Snorby to v2.4.0"          | $LOGGER
    apt-get -y install git-core                 >> $LOG
    cd $SNORBYHOME
    git stash                       >> $LOG
    git pull origin master                  >> $LOG
    git checkout ce0875897441a244ddd14e75461337d3519fd7c4   >> $LOG
    git stash pop                       >> $LOG
    cp config/database.example.yml config/database.yml

    cd $DIR
    FILE=snorby_config.yml
    wget -q http://sourceforge.net/projects/security-onion/files/$NEW/$FILE -O $FILE | $LOGGER
    cp $FILE $SNORBYHOME/config/
    FILE=snorby_start
    wget -q http://sourceforge.net/projects/security-onion/files/$NEW/$FILE -O $FILE | $LOGGER
    cp $FILE $SNORBYHOME/
    chmod +x $SNORBYHOME/$FILE

    cd $SNORBYHOME
    echo "* Fixing Gemfile"                 | $LOGGER
    sed -i 's|^<<<<<<< Updated upstream$||g' Gemfile
    sed -i 's|^=======$||g' Gemfile
    sed -i 's|^>>>>>>> Stashed changes$||g' Gemfile

    echo "* Installing Ruby redcloth"           | $LOGGER
    export RBENV_ROOT=$SNORBYHOME/.rbenv
    export PATH=$RBENV_ROOT/bin:$PATH
    eval "$(rbenv init -)"
    bundle install                      >> $LOG

    if [ -d /var/lib/mysql/snorby ]; then
        echo "* Updating Snorby database"       | $LOGGER
        bundle exec rake snorby:update          >> $LOG
        echo "* Starting Snorby"            | $LOGGER
        /usr/local/share/snorby/snorby_start        >> $LOG
    fi

        sed -i "s|VERSION=$VERSION|VERSION=$NEW|g" $CONF        | $LOGGER
        echo "* Upgrade to $NEW complete."                      | $LOGGER
        echo 
fi

Original comment by doug.bu...@gmail.com on 22 Feb 2012 at 2:19

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

Published:
http://securityonion.blogspot.com/2012/02/security-onion-20120222-now-available.
html

Original comment by doug.bu...@gmail.com on 22 Feb 2012 at 2:34

  • Changed state: Verified
  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

I tried to install sudo apt-get -y install securityonion-all its done with 
error Unable to locate package securityonion-all.
What will i do?

Original comment by revathi4...@gmail.com on 3 Sep 2013 at 9:15

  • Added labels: ****
  • Removed labels: ****

@GoogleCodeExporter
Copy link
Author

Hi revathi4892,

Please follow the instructions here:
https://code.google.com/p/security-onion/wiki/Installation

If you have further questions or problems, please send a detailed email to our 
mailing list:
https://code.google.com/p/security-onion/wiki/MailingLists

Original comment by doug.bu...@gmail.com on 3 Sep 2013 at 10:34

  • Added labels: ****
  • Removed labels: ****

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant