Corelight-update service¶
When Corelight-update is installed, in addition to a corelight-update.service
, a system user and group are automatically created.
The service runs as the system user corelight-update
. However, it’s disabled by default.
To run Corelight-update as a service, enable the service and start it.
Enable the service:
sudo systemctl enable corelight-update.service
Start the service:
sudo systemctl start corelight-update.service
To view the status of the service:
systemctl status corelight-update.service
To monitor the logs from the service: The
-f
option makes the command follow the log until it’s canceled.sudo journalctl -f -u corelight-update