Add automatic (scheduled) search functionality

Issue #376 resolved
MaxD created an issue

Hello. Is it possible to add some DLP function - like schedule search mail in archive with sending results by email ?

Comments (4)

  1. Janos SUTO repo owner

    This feature is already implemented. Look for autosearch.php in /usr/local/libexec/piler directory. It sends the results to $automated_search_recipients specified in config-site.php. This is an array, eg.

    array('email1', 'email2", ...);
    

    It has tow modes:

    a) ad-hoc search, eg.

    /usr/bin/php /usr/local/libexec/piler/automated-search.php --webui=/var/www/piler.yourdomain.com --search 'subject: kernel panic apparmor, from: @redhat.com' 
    

    b) as admin@local, find the automated search menu, where you can specify multiple search queries. To use this feature, apply the --auto option.

  2. Janos SUTO repo owner

    Also note that I've just updated the master branch to fix a few things in the automated search. If you need help regarding the automatic search feature, write to the mailing list.

  3. MaxD reporter

    Hello Janos, sorry for disturb - but I can't understand, where I should "apply --auto option" for automated search, It's incorrect option for configure, I can't find any such option in configure.php, I try to add it into search cryteria

  4. Janos SUTO repo owner

    Hello Maxim, no problem. --auto is not for ./configure. Rather it's for automated-search.php:

    /usr/bin/php /usr/local/libexec/piler/automated-search.php --webui=/var/www/piler.yourdomain.com --auto
    
  5. Log in to comment