Menu ▾ ▴

Snorby won't start

NST
Will Pearson
2018-08-23
2018-08-24

  • Will Pearson

    Will Pearson - 2018-08-23

    I'm getting this error message in the NST WUI when I trying to get Snorby to run. Snort, Barnyard, and MariaDB start just fine. It appears to be a ruby on rails issue, though I'm not sure.

    00032: ● snorby-worker.service - Worker service
    00033: Loaded: loaded (/usr/lib/systemd/system/snorby-worker.service; disabled; vendor preset: disabled)
    00034: Active: failed (Result: exit-code) since Thu 2018-08-23 12:39:55 EDT; 1s ago
    00035: Docs: https://github.com/Snorby/snorby
    00036: Process: 20227 ExecStart=/usr/bin/bundle exec script/delayed_job restart RAILS_ENV=production (code=exited, status=1/FAILURE)
    00037:
    00038: ● snorby.service - Web application for IDS monitoring service
    00039: Loaded: loaded (/usr/lib/systemd/system/snorby.service; disabled; vendor preset: disabled)
    00040: Active: failed (Result: exit-code) since Thu 2018-08-23 12:39:52 EDT; 5s ago
    00041: Docs: https://github.com/Snorby/snorby
    00042: Process: 19844 ExecStart=/usr/bin/bundle $OPTIONS (code=exited, status=1/FAILURE)
    00043: Main PID: 19844 (code=exited, status=1/FAILURE)
    00044: Exit Code: 3
    00045: Start: 2018-08-23 12:39:57.200 End: 12:39:57.264 Dur: 0.064

     

  • Ronald W. Henderson

    Ronald W. Henderson - 2018-08-24

    Will:

    Please upgrade to NST 28. Snorby has been retired since the vendor no longer supports it. NST 28 now uses Sguil.

    Thank you,
    Ron Henderson

     

    Last edit: Ronald W. Henderson 2018-08-24

Log in to post a comment.