-
Version2.4.211 Installation MethodSecurity Onion ISO image Descriptionother (please provide detail below) Installation TypeDistributed Locationon-prem with Internet access Hardware SpecsExceeds minimum requirements CPU36 RAM112GB Storage for /132GB Storage for /nsm6TB Network Traffic Collectionspan port Network Traffic Speeds1Gbps to 10Gbps StatusYes, all services on all nodes are running OK Salt StatusNo, there are no failures LogsNo, there are no additional clues DetailI have a sensor that is accepted into the grid, as shown below. It's the sensor redacted in red, not in black. 
But does not appear on the SOC grid list. 
Below are the outputs of the sudo salt '*' test.ping and sudo salt '*' system.get_system_date_time commands, which seem to indicate all is good. I am getting pcap from the sensor, so I'm assuming it's just a SOC rendering issue. Any clues on how to resolve this are appreciated. Guidelines
|
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
|
What do you get if you target that sensor with salt and run If there is anything other that okay, post your output. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for pointing me in the right direction. When I ran |
Beta Was this translation helpful? Give feedback.
What do you get if you target that sensor with salt and run
sudo '*-so-sensor1_sensor' so.status? If it shows everything running and OK, try and check port 443sudo salt '*-so-sensor1_sensor' network.connect $managerIP 443(replace $managerIP with your manager's IP address). If that completes okay try restartingtelegrafandsensoronion the sensor.If there is anything other that okay, post your output.