Merge pull request #1056 from utmstack/bugfix/10.6.0/ism-snapshot-24h

Fix: snapshot timing to include only indices older than 24 hours

Author: c3s4rfred

CHANGELOG.md

@@ -1,8 +1,3 @@
-# UTMStack 10.6.0 Release Notes
+# UTMStack 10.6.1 Release Notes
 ## Bug Fixes
-- Reorganized GeoIP database loading into more modular functions for improved maintainability and code readability. Simplified caching, removed unused database function, and restructured rule-handling logic. Improved consistency by standardizing variable names and logging practices.
-- Removed unused docker volume configuration for GeoIp.
-- Fixed Kernel modules weren't loaded because incorrect function call.
-
-## New Features
-- Introduced automatic threat intelligence rules to detect blacklisted ips, hostnames and domains.
+- Fixed ISM policy to ensure snapshots include only indices older than 24 hours.

backend/src/main/java/com/park/utmstack/service/index_policy/IndexPolicyService.java

@@ -162,7 +162,7 @@ public void updatePolicy(PolicySettings settings) {
                     .ifPresent(state -> {
                         Transition transition = state.getTransitions().get(0);
                         transition.setStateName(Constants.STATE_BACKUP);
-                        transition.setConditions(null);
+                        transition.setConditions(new TransitionCondition("24h"));
                     });
 
                 // open -> safe_delete
@@ -178,6 +178,7 @@ public void updatePolicy(PolicySettings settings) {
                     .ifPresent(state -> {
                         Transition transition = state.getTransitions().get(0);
                         transition.setStateName(Constants.STATE_OPEN);
+                        transition.setConditions(new TransitionCondition("24h"));
                     });
 
                 // open -> delete

version.yml

@@ -1 +1 @@
-version: 10.6.0
+version: 10.6.1