Hey, i use both Ubuntu 18.04 & 20.04 releases,
I have a Suricata configured with Elasticsearch as the DB, and evebox as my IDS GUI.
The Suricata is running through couple live interfaces and writes data to it’s files,
But out of nowhere it stops writing, the services are running (of suricata, elastic and evebox), but the writing to the file stops, there’s not a problem with the storage or permissions.
Any idea why?
Thank you and have a nice day!
Any err or warning in suricata.log ?