From 7a296cfcff3de6eaa6824f22c80e261ada318e4d Mon Sep 17 00:00:00 2001 From: Colton Myers Date: Fri, 14 Oct 2016 17:17:03 -0600 Subject: [PATCH 1/5] Add __version__ to all modules --- _beacons/pulsar.py | 1 + _beacons/win_pulsar.py | 1 + 2 files changed, 2 insertions(+) diff --git a/_beacons/pulsar.py b/_beacons/pulsar.py index ad2fce1..13c7053 100644 --- a/_beacons/pulsar.py +++ b/_beacons/pulsar.py @@ -39,6 +39,7 @@ DEFAULT_MASK = None __virtualname__ = 'pulsar' +__version__ = 'v2016.10.1' CONFIG = None CONFIG_STALENESS = 0 diff --git a/_beacons/win_pulsar.py b/_beacons/win_pulsar.py index 1196d52..efdb7e7 100644 --- a/_beacons/win_pulsar.py +++ b/_beacons/win_pulsar.py @@ -25,6 +25,7 @@ DEFAULT_TYPE = 'all' __virtualname__ = 'pulsar' +__version__ = 'v2016.10.1' CONFIG = None CONFIG_STALENESS = 0 From a3ec881184010127a4be91a5da4b5b08afda0dc4 Mon Sep 17 00:00:00 2001 From: Colton Myers Date: Tue, 18 Oct 2016 09:21:58 -0600 Subject: [PATCH 2/5] Add new exclude for /opt/imply --- hubblestack_pulsar/hubblestack_pulsar_config.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/hubblestack_pulsar/hubblestack_pulsar_config.yaml b/hubblestack_pulsar/hubblestack_pulsar_config.yaml index ed28b41..9f807ab 100644 --- a/hubblestack_pulsar/hubblestack_pulsar_config.yaml +++ b/hubblestack_pulsar/hubblestack_pulsar_config.yaml @@ -16,6 +16,8 @@ - /opt/splunk/var/ - /opt/cloudpassage/log/ - /opt/splunkforwarder/var/ + - '\/opt\/imply-\d\.\d\.\d\/': + regex: True recurse: True auto_add: True /etc: From 488b9a1fa40ee399546c82aab46ccce2b11551b5 Mon Sep 17 00:00:00 2001 From: Colton Myers Date: Tue, 18 Oct 2016 09:25:46 -0600 Subject: [PATCH 3/5] Add troubleshooting section --- README.rst | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/README.rst b/README.rst index 16a83b3..fb2c8f5 100644 --- a/README.rst +++ b/README.rst @@ -240,6 +240,27 @@ defined path. - /var/cache - /var/lock + +Troubleshooting +=============== + +If inotify is reporting that it can't create watches due to lack of disk space, +but you have plenty of disk space and inodes available, then you may have to +raise the max number of inotify watches. + +To check the max number of inotify watches: + +.. code-block:: bash + + # cat /proc/sys/fs/inotify/max_user_watches + +To set the max number of inotify watches: + +.. code-block:: bash + + # echo 20000 | sudo tee -a /proc/sys/fs/inotify/max_user_watches + + .. _pulsar_under_the_hood: Under The Hood From 0ff95b70a875b78e02bf82c71566a0dd4fabc807 Mon Sep 17 00:00:00 2001 From: Colton Myers Date: Tue, 18 Oct 2016 09:56:23 -0600 Subject: [PATCH 4/5] Update pulsar.py to v2016.10.2 --- _beacons/pulsar.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_beacons/pulsar.py b/_beacons/pulsar.py index 13c7053..75d75b2 100644 --- a/_beacons/pulsar.py +++ b/_beacons/pulsar.py @@ -39,7 +39,7 @@ DEFAULT_MASK = None __virtualname__ = 'pulsar' -__version__ = 'v2016.10.1' +__version__ = 'v2016.10.2' CONFIG = None CONFIG_STALENESS = 0 From cbd4850bf3f8ec768dc1a3e9f6c62d4385e7122f Mon Sep 17 00:00:00 2001 From: Colton Myers Date: Tue, 18 Oct 2016 09:56:43 -0600 Subject: [PATCH 5/5] Update win_pulsar.py to v2016.10.2 --- _beacons/win_pulsar.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_beacons/win_pulsar.py b/_beacons/win_pulsar.py index efdb7e7..3840c82 100644 --- a/_beacons/win_pulsar.py +++ b/_beacons/win_pulsar.py @@ -25,7 +25,7 @@ DEFAULT_TYPE = 'all' __virtualname__ = 'pulsar' -__version__ = 'v2016.10.1' +__version__ = 'v2016.10.2' CONFIG = None CONFIG_STALENESS = 0