Snort3 Docker help

Nick Godwod via Snort-users <[email protected]> Wed, 20 Sep 2023 11:19:31 -0600
Newsgroups gmane.comp.security.ids.snort.general
Message-ID <[email protected]>
Howdie folks,

Working on getting Snort3 up and running in docker. Ive utilized what I can from various github and docker images, however Im having and issue with logging.

In my snort.lua I specify to log to an alert_json file.

At run time in the dockerfile, I have specificed “-l /var/log/snort” for alert log placement.

However, when running the docker container i get “FATAL:OpenAlertFile() => fopen() alert file /var/log/snort/alert_json.txt.

Ive tried to troubleshoot a couple different ways and I am unable to fix this issue.
Sent from my iPhone
_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette