Corelight-update Service

When Corelight-update is installed, in addition to a corelight-update.service, a system user and group are automatically created. The service runs as the system user corelight-update. However, it’s disabled by default. To run Corelight-update as a service, enable the service and start it.

  1. Enable the service:

    sudo systemctl enable corelight-update.service
    
  2. Start the service:

    sudo systemctl start corelight-update.service
    
  3. To view the status of the service:

    systemctl status corelight-update.service
    
  4. To monitor the logs from the service: The -f option makes the command follow the log until it’s canceled.

    sudo journalctl -f -u corelight-update