|AlienVault Ticket ID||ENG-103702|
In AlienVault USM Appliance, if you set the search domain to a certain value that contains "networks", it can break system update or package installation. For example, if a company's name has "networks" in it, such as Networks Solutions, and the search domain is set to networksolutionstest.com, some packages' postinstall scripts like alienvault-suricata and alienvault-prads can break system update. Similar settings can be shown below:
The postinst scripts for alienvault-suricata and alienvault-prads grep for "networks". If you use the word "networks" in the search domain name field it will break the postinstall configure script for the mentioned packages.
The error can be showed in the last update log located in /var/log/alienvault/update:
To prevent this issue, remove the word "networks" in the search domain name field in the network domain settings.