Skip to content

Latest commit

 

History

History
39 lines (21 loc) · 1.1 KB

README.md

File metadata and controls

39 lines (21 loc) · 1.1 KB
Raw

Bank First Integraiton

to pull this repository and submodules:

cd /usr/local

sudo git clone --recurse-submodules https://github.com/DefenseStorm/csvEvents.git

cd csvEvents

  1. If this is the first integration on this DVM, Do the following:

sudo cp ds-integration/ds_events.conf /etc/syslog-ng/conf.d

Edit /etc/syslog-ng/syslog-ng.conf and add local7 to the excluded list for filter f_syslog3 and filter f_messages. The lines should look like the following:

filter f_syslog3 { not facility(auth, authpriv, mail, local7) and not filter(f_debug); };

filter f_messages { level(info,notice,warn) and not facility(auth,authpriv,cron,daemon,mail,news,local7); };

Restart syslog-ng

sudo service syslog-ng restart

  1. Copy the template config file and update the settings

sudo cp csvEvents.conf.template csvEvents.conf

Put the appropriate configurations in the conf file: watch_dir (same directory as configured in smb.conf) backup_dir securenow_prefix pdw_prefix

  1. Add the following entry to the root crontab so the script will run every 5 minutes

    */5 * * * * cd /usr/local/csvEvents; ./csvEvents.py