idaholab / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Home Page:https://idaholab.github.io/Malcolm/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

clean-processed-folder.py out of date for current filebeat registry behavior

mmguero opened this issue · comments

clean-processed-folder.py reads the filebeat registry file to ensure that it does not clean up files that filebeat still has in use.

However, the format of this file has changed at somepoint in the past and was no longer being read correctly.

These commits address the issue: