michal25

Well, but now the FPC url (screenshot) in Kibana selection reports this  ERROR - getUser - user: moloch err: [index_not_found_exception] no such index [users], with { resource.type="index_expression" & resource.id="users"...

Well, here is no users_v7 index. Not created. How to re-create this index?

I don't know. But, the completely fresh install SELKS6 have this index and SELKS5 to SELKS6 upgrade don't have this index. Is it here some console script to complete re-create...

I tried this script selks-first-time-setup_stamus And now, I can see the Moloch table with known error Unknown field protocols I will try to restart the SELKS machine, maybe Moloch will...

Well, I had to do: 1. Restart SELKS 2. selks-first-time-setup_stamus 3. selks-db-logs-cleanup_stamus 4. selks-upgrade_stamus Now, Moloch seems to be empty (ok, data in RAM cache, yet) but without error page....

Now, I can see data. Works! 

The service restart have no effect. OS restart have also no effect.. ● molochpcapread-selks.service - Moloch Pcap Read Loaded: loaded (/etc/systemd/system/molochpcapread-selks.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since...

``` root@SELKS2:~# selks-health-check_stamus ● suricata.service - LSB: Next Generation IDS/IPS Loaded: loaded (/etc/init.d/suricata; generated; vendor preset: enabled) Active: active (running) since Thu 2019-11-21 02:02:47 CET; 8h ago Docs: man:systemd-sysv-generator(8) Process:...

``` root@SELKS2:~# dpkg -l |grep ssl ii libflac8:amd64 1.3.2-1 amd64 Free Lossless Audio Codec - runtime C library ii libio-socket-ssl-perl 2.044-1 all Perl module implementing object oriented interface to SSL...

Because /etc/apt/sources.list deb http://ftp.cz.debian.org/debian/ stretch main and openssl 1.1.1 is deb http://ftp.de.debian.org/debian buster main