sostat: check for stuck ELSA cron.pl

[dougburks]

Related to #1059, we need an additional sostat check in the ELSA section which displays the age (or start time) of the running cron process as well as archive errors in the log.

[weslambert]

Are there any specific archive errors to look out for? I'm was thinking a grep for 'failed|* ERROR|Duplicate entry' would suffice, but did you have anything else in mind? Would a lookup of saved_results (based on a duplicate qid error in web.log) be useful as well?

[dougburks]

Hey Wes,

Sounds good, thanks!

[dougburks]

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/de_uJ652_jY/discussion

[dougburks]

published:
http://blog.securityonion.net/2017/06/securityonion-sostat-20120722.html