You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I've been experiencing issues with getting Pulsar to produce JSON output. I am running Pulsar in a test environment and it correctly logs threat events based on a couple of rules I defined. The trouble is that the only output I am getting is in the console and in the default format. It seems the logger config is being ignored, and I can't find anything in the syslog even with it enabled.
Please excuse my naiveté in case I misunderstood the premise of the logger module entirely. Nonetheless, how do I troubleshoot this dillemma? Thanks in advance!
The text was updated successfully, but these errors were encountered:
The first thing you can do is to run pulsar-exec pulsar config -m logger (or pulsar instead of pulsar-exec pulsar if you have the helper scripts) to check the configuration.
I tried the main branch with the following configuration in the pulsar.ini and I am getting the JSON output and syslog messages:
I later tried running it within Docker (--privileged --net=host --pid=host --cgroupns=host) and still no dice. Should I be seeing JSON in the standard output/error using the above config?
Hi folks!
I've been experiencing issues with getting Pulsar to produce JSON output. I am running Pulsar in a test environment and it correctly logs threat events based on a couple of rules I defined. The trouble is that the only output I am getting is in the console and in the default format. It seems the logger config is being ignored, and I can't find anything in the syslog even with it enabled.
Please excuse my naiveté in case I misunderstood the premise of the logger module entirely. Nonetheless, how do I troubleshoot this dillemma? Thanks in advance!
The text was updated successfully, but these errors were encountered: