Snorby/snorby — Issue #166: SensorCacheJob issue
Author: therock11
Created: 2011-11-23 14:31:32+00:00
State: open

I have been stuck unable to get past events from months ago in the sensor cache job. Is there a way to force it past the date and only read new events without deleting them from the snortdb? The following is how far back I am.

New Day: 2011-03-21T14:00:00-04:00 - 2011-03-21T14:30:00-04:00
Sensor 1: 20624 events found. Processing.