I have a small virtualized environment (about 10 servers) where I set up Security Onion. It's acting as a server and a sensor. This particular server has two NICs (one for management, one for monitoring). I went through the set up and installed all the updates. My event count in Snorby is sitting @ zero. Can someone help me unearth what is going on? I've been a windows guy for a long time and am just now stepping in to the ubuntu/linux world. I've been trying to use the online security onion guide but hasn't been too helpful.