How to configure daemonmove
The configuration file conf.cfg for the daemonmove service is located in the /etc/redismove directory.
This file defines the main operating parameters of the service, including keys for event distribution and paths to log and temporary files.
Keys corresponde to events names.
Main key is redis key to which suricata outputs eve.log.
# Configuration file for the application
application:
{
main:
{
title = “REDISMOVE”;
version = “0.8.2”;
date = “23 Mar 2024”;
};settings:
{
main_key = “suricata”;
keys = (“alert”, “anomaly”, “dcerpc”, “flow”, “http”, “dns”, “drop”, “stats_report”, “fileinfo”, “tls”, “stats”, “ftp”, “sip”, “smb”, “snmp”, “ssh”, “flow_data”, “tftp”, “ssh”, “bittorrent_dht”, “rdp”, “http2”, “pqsql”, “quic”, “modbus”);
valid_duration = 24;
log_file = “/var/log/suricata/eve.json”;
temp_file = “/tmp/daemonparser/current”;
};