From 372d553209678813dbedc4fe26b8b6249c13c8f3 Mon Sep 17 00:00:00 2001 From: bmeeks8 Date: Wed, 4 Feb 2015 16:50:30 -0500 Subject: Auto-enable alerts to system log when EVE output to syslog is chosen. --- config/suricata/suricata_interfaces_edit.php | 29 +++++++++++++++------------- 1 file changed, 16 insertions(+), 13 deletions(-) (limited to 'config/suricata') diff --git a/config/suricata/suricata_interfaces_edit.php b/config/suricata/suricata_interfaces_edit.php index 13526031..4319182d 100644 --- a/config/suricata/suricata_interfaces_edit.php +++ b/config/suricata/suricata_interfaces_edit.php @@ -307,6 +307,12 @@ if ($_POST["save"] && !$input_errors) { if ($_POST['intf_promisc_mode'] == "on") { $natent['intf_promisc_mode'] = 'on'; }else{ $natent['intf_promisc_mode'] = 'off'; } if ($_POST['configpassthru']) $natent['configpassthru'] = base64_encode(str_replace("\r\n", "\n", $_POST['configpassthru'])); else unset($natent['configpassthru']); + // Check if EVE OUTPUT TYPE is 'syslog' and auto-enable Suricata syslog output if true. + if ($natent['eve_output_type'] == "syslog" && $natent['alertsystemlog'] == "off") { + $natent['alertsystemlog'] = "on"; + $savemsg = gettext("EVE Output to syslog requires Suricata alerts to be copied to the system log, so 'Send Alerts to System Log' has been auto-enabled."); + } + $if_real = get_real_interface($natent['interface']); if (isset($id) && $a_rule[$id] && $action == '') { // See if moving an existing Suricata instance to another physical interface @@ -434,13 +440,8 @@ if ($_POST["save"] && !$input_errors) { sync_suricata_package_config(); conf_mount_ro(); - header( 'Expires: Sat, 26 Jul 1997 05:00:00 GMT' ); - header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s' ) . ' GMT' ); - header( 'Cache-Control: no-store, no-cache, must-revalidate' ); - header( 'Cache-Control: post-check=0, pre-check=0', false ); - header( 'Pragma: no-cache' ); - header("Location: /suricata/suricata_interfaces.php"); - exit; + // Refresh page fields with just-saved values + $pconfig = $natent; } else $pconfig = $_POST; } @@ -452,7 +453,13 @@ include_once("head.inc"); - + +