Change default output to Unix socket
Some checks failed
Build RPM Package / Build RPM Packages (CentOS 7, Rocky 8/9/10) (push) Has been cancelled
Some checks failed
Build RPM Package / Build RPM Packages (CentOS 7, Rocky 8/9/10) (push) Has been cancelled
- config.yml.example: Unix socket enabled by default, stdout commented out - internal/output/writers.go: Remove all internal logging from UnixSocketWriter and FileWriter - only LogRecord JSON data is sent to outputs - architecture.yml: Update description to mention 'socket UNIX par défaut' - packaging/rpm/ja4sentinel.spec: Bump version to 1.1.1, update changelog Diagnostic logs (error, debug, warning) now only go to stdout when enabled. Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
This commit is contained in:
@ -3,7 +3,7 @@
|
||||
%if %{defined build_version}
|
||||
%define spec_version %{build_version}
|
||||
%else
|
||||
%define spec_version 1.1.0
|
||||
%define spec_version 1.1.1
|
||||
%endif
|
||||
|
||||
Name: ja4sentinel
|
||||
@ -31,7 +31,7 @@ Features:
|
||||
- TLS ClientHello extraction
|
||||
- JA4/JA3 fingerprint generation
|
||||
- IP/TCP metadata enrichment
|
||||
- Multiple output formats (stdout, file, UNIX socket)
|
||||
- Multiple output formats (UNIX socket by default, stdout, file)
|
||||
- Structured JSON logging for systemd/journald
|
||||
- Compatible with Rocky Linux 8/9/10, RHEL, AlmaLinux
|
||||
|
||||
@ -122,6 +122,12 @@ fi
|
||||
%dir /var/run/logcorrelator
|
||||
|
||||
%changelog
|
||||
* Mon Mar 02 2026 Jacquin Antoine <rpm@arkel.fr> - 1.1.1-1
|
||||
- Change default output from stdout to Unix socket (/var/run/logcorrelator/network.socket)
|
||||
- Update config.yml.example to enable unix_socket output by default
|
||||
- Comment out stdout output in default configuration
|
||||
- Unix socket output configured with log_level: error by default
|
||||
|
||||
* Mon Mar 02 2026 Jacquin Antoine <rpm@arkel.fr> - 1.1.0-1
|
||||
- Add logrotate configuration for automatic log file rotation
|
||||
- Add SIGHUP signal handling for log file reopening (systemctl reload)
|
||||
|
||||
Reference in New Issue
Block a user