Suricata

Bug #6920

Updated by Simen Lybekk 8 months ago

During roll-out of 7.0.4 we experienced that non-worker stats namespaces like flow recycler, flow manager and Global were absent from the stats log. 

 Reverting the following commit seems to have solved the issue for us: 
 https://github.com/OISF/suricata/commit/f8ec39208d3f4c57da3fc394e86c64eb816cc6cd 

 This has been We do not apply patches to the stats adjacent code in Suricata, so I have not at this point verified with a clean checkout of the suricata-7.0.4 tag. 


 Relevant configuration: 
 <pre><code class="yaml"> 
 outputs: 
 - eve-log: 
     enabled: true 
     filemode: 644 
     filename: stats-json.log 
     types: 
     - stats: 
         deltas: false 
         threads: true 
         totals: false 

 stats: 
   decoder-events: true 
   decoder-events-prefix: decoder.event 
   enabled: true 
   interval: 8 
   stream-events: true 
 </code></pre> 

Back