Actions
Feature #6004
openAdd retry option to redis outputs using a socket instead of IP
Description
If users are running eve-log output forwarded to redis they can either use the IP/PORT setting or directly the unix socket provided by redis. The latter option has a better performance but the drawback is, that currently Suricata would exit if the socket is gone. This is not the case when using the IP/PORT combo.
I propose Suricata should do retries like it does in the pure socket mode called `unix_stream`.
Updated by Andreas Herz 9 days ago
Looks like in src/util-log-redis.c we have to update SCLogRedisWriteAsync to not directly return -1 but run some tries, like the later function SCLogAsyncRedisSendEcho does in using SCRedisAsyncEchoCommandCallback
Actions