New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Setup: use lowercase of hostname when creating sensornames #988

Closed
dougburks opened this Issue Sep 2, 2016 · 4 comments

Comments

Projects
None yet
1 participant
@dougburks
Contributor

dougburks commented Sep 2, 2016

No description provided.

@dougburks

This comment has been minimized.

Show comment
Hide comment
@dougburks

dougburks Sep 2, 2016

Contributor

Scenario:
Sensor has a hostname of SENSOR1 (uppercase).
Setup currently forms a sensorname like SENSOR1-eth1.
If at some point the sensor has to be wiped and is reinstalled with the same hostname but lowercase (sensor1), then Sguil/Squert/MySQL will be inconsistent. Logging into the Sguil client will prompt for network to monitor and will show the OLD net-name (SENSOR1) which will then prevent any new alerts from being displayed. By forcing hostname to lowercase, we avoid case-sensitivity issues like this.

Contributor

dougburks commented Sep 2, 2016

Scenario:
Sensor has a hostname of SENSOR1 (uppercase).
Setup currently forms a sensorname like SENSOR1-eth1.
If at some point the sensor has to be wiped and is reinstalled with the same hostname but lowercase (sensor1), then Sguil/Squert/MySQL will be inconsistent. Logging into the Sguil client will prompt for network to monitor and will show the OLD net-name (SENSOR1) which will then prevent any new alerts from being displayed. By forcing hostname to lowercase, we avoid case-sensitivity issues like this.

@dougburks

This comment has been minimized.

Show comment
Hide comment
Contributor

dougburks commented Nov 25, 2016

@dougburks

This comment has been minimized.

Show comment
Hide comment
Contributor

dougburks commented Nov 25, 2016

@dougburks

This comment has been minimized.

Show comment
Hide comment

@dougburks dougburks closed this Nov 30, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment