Just installed the IPS module to help another user and found curious that the database appears as malformed on a new empty installation:
[root@server ~]# evebox version EveBox Version 0.11.1 (rev 4d1b355); os=linux, arch=amd64 [root@server ~]# systemctl stop evebox [root@server ~]# lsof /var/lib/evebox/events.sqlite [root@server ~]# sqlite3 --version 3.7.17 2013-05-20 00:56:22 118a3b35693b134d56ebd780123b7fd6f1497668 [root@server ~]# sqlite3 /var/lib/evebox/events.sqlite "PRAGMA integrity_check;" Error: malformed database schema (events_escalated_view_index) - near "(": syntax error
After dumping the old database to a new database (with some output errors) and checking the integrity as OK, it gets malformed as soon as evebox service is started.
Is there any extra step to do related to the database after installing evebox? (already tried enabling the IPS, but note this is without events ATM)
It is some bug on the evebox release, a problem with the sqlite3 version or something else?