July 4, 2024 By Sergey

How to configure daemonmove

The configuration file conf.cfg for the daemonmove service is located in the /etc/redismove directory.
This file defines the main operating parameters of the service, including keys for event distribution and paths to log and temporary files.
Keys corresponde to events names.
Main key is redis key to which suricata outputs eve.log.

# Configuration file for the application

application:
{
main:
{
title = “REDISMOVE”;
version = “0.8.2”;
date = “23 Mar 2024”;
};

settings:
{
main_key = “suricata”;
keys = (“alert”, “anomaly”, “dcerpc”, “flow”, “http”, “dns”, “drop”, “stats_report”, “fileinfo”, “tls”, “stats”, “ftp”, “sip”, “smb”, “snmp”, “ssh”, “flow_data”, “tftp”, “ssh”, “bittorrent_dht”, “rdp”, “http2”, “pqsql”, “quic”, “modbus”);
valid_duration = 24;
log_file = “/var/log/suricata/eve.json”;
temp_file = “/tmp/daemonparser/current”;
};