Re: [Prelude Hybrid IDS] #191: Group by user broken

#191: Group by user broken
-----------------------+----------------------------------------------------
 Reporter:  anonymous  |        Owner:  yoann         
     Type:  defect     |       Status:  assigned      
 Priority:  normal     |    Milestone:  Prewikka 0.9.9
Component:  prewikka   |      Version:  0.9           
 Severity:  normal     |   Resolution:                
 Keywords:             |  
-----------------------+----------------------------------------------------
Comment (by [email protected]):

 {{{
 #LOG:openvpn[19067]: 210.246.24.124:1194 [User_Name] Peer Connection
 Initiated with 210.246.24.124:1194
 regex=\[(\w+)\] Peer Connection Initiated with ([\d\.]+); \
  classification.text=Remote user logged in; \
  id=31000; \
  revision=1; \
  analyzer(0).name=OpenVPN; \
  analyzer(0).manufacturer=OpenVPN; \
  analyzer(0).class=Remote Login; \
  source(0).user.category=os-device; \
  source(0).user.user_id(0).type=current-user; \
  source(0).user.user_id(0).name=$1; \
  source(0).node.address(0).category=ipv4-addr; \
  source(0).node.address(0).address=$2; \
  assessment.impact.severity=info; \
  assessment.impact.type=other; \
  assessment.impact.completion=succeeded; \
  assessment.impact.description=$1 has logged in; \
  last
 }}}

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/191#comment:4>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel