Once you have compiled and installed Orchids, you can tune the way it behaves by editing configuration files. They will be in /usr/local/etc/orchids/
, assuming Orchids was installed in /usr/local/, its default location. Let us create a shell variable for this:
export OCONF=/usr/local/etc/orchids
The configuration files are:
- The general configuration file $OCONF/orchids.conf
- The list of modules that Orchids loads on startup, $OCONF/orchids-modules.conf
- Module-specific configuration files, $OCONF/conf.d/<module-name>.conf
- The list of input sources, $OCONF/orchids-inputs.conf
- The list of rules (signatures) that Orchids will monitor, $OCONF/orchids-rules.conf
If you wish to create a package, you should change $OCONF
to something more relevant, and you should also edit the .conf.dist files, not the .conf files. See the package building pages.