Timothy M Butterworth wrote: > On Fri, Mar 10, 2023 at 2:10 PM Dan Ritter <[email protected]> wrote: > > What happens when you run the daemon by hand? > > > > -dsr- > > > > suricata -c /etc/suricata/suricata.yaml -s signatures.rules -i wlo1 > Error opening file /var/log/suricata//suricata.log > 10/3/2023 -- 16:08:51 - <Notice> - This is Suricata version 6.0.10 RELEASE > running in SYSTEM mode > 10/3/2023 -- 16:08:51 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The > logging directory "/var/log/suricata/" supplied by > /etc/suricata/suricata.yaml (default-log-dir) is not writable. Shutting > down the engine
You have discovered at least the first problem, then. You can create and permission the directory appropriately, or change the config. -dsr-
