Being bold categorizing it as a bug although it’s non critical
Behavior: (how to reproduce)
On fresh install ISP (suricata) is disabled by default, you have to enable it in the server-manager or manually enable it as as documented here.
Just after a fresh install evebox is enabled by default and running, AFAIK not able to report something.
Same applies if you decide to disable IPS: evebox keeps on running.
evebox start and stops with IPS (suricata).
I think the
status of evebox can be included in
Unfortunately PHP is not my strong point, hence uncomfortable produce a PR on this.