开源IDS系列--snorby 进程正常，但是worker无法启动 The Snorby worker is not currently running

设置页面报错：

 

The Snorby worker is not currently running. It's imperative you start the worker immediately! All backend calculations are performed asynchronously using the Snorby Worker. 

 

排查思路：手动执行snorby启动（在/etc/init.d/snorby中寻找启动方式）

 

/usr/local/rvm/rubies/ruby-1.9.3-p545/bin/ruby  /opt/snorby/script/delayed_job start

 

 

 

 

才发现原来是ruby版本不对，导致无法启动，修改/etc/init.d/snorby中的ruby路径即可。

 

 

另外还有一种可能，旧的无效delayed_job有问题，需要关闭重启：

 

sudo pkill -f delayed_job

bundle exec rake snorby:update RAILS_ENV=production