Project

General

Profile

Actions

Feature #6004

open

Add retry option to redis outputs using a socket instead of IP

Added by Andreas Herz over 1 year ago. Updated 4 days ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

If users are running eve-log output forwarded to redis they can either use the IP/PORT setting or directly the unix socket provided by redis. The latter option has a better performance but the drawback is, that currently Suricata would exit if the socket is gone. This is not the case when using the IP/PORT combo.
I propose Suricata should do retries like it does in the pure socket mode called `unix_stream`.

Actions

Also available in: Atom PDF