I have a SecurityOnion and when I installed the emailer I started getting messages about /nsm/bro/spool/stats.log No such file or directory reported by stats-to-csv manager. Any guidance on where to start tracking this down is appreciated.
I tried adding the file manually but when the cron job runs it seems to remove it. I do see stats.log files in other places.
/nsm/bro/logs/stats/stats.log
/nsm/sensor_data/pcs-so-m1-enp0s26u1u3/stats.log
/nsm/sensor_data/pcs-so-m1-enp21s0/stats.log
/var/lib/docker/overlay2/f0b8b82e33704350d0271ad1abfee8eff55e312df1ff5ad84b65c0c6ba156d3d/diff/var/log/domain_stats/domain_stats.log
Thanks,