Changing output type on snort 2.9.7
Alexander Kushnarev via Snort-devel <[email protected]> Wed, 21 Aug 2019 09:07:24 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <AM6PR0502MB3928E412B50ACE00B67B1131F5AA0@AM6PR0502MB3928.eurprd05.prod.outlook.com> |
--===============7601811293990736192==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_AM6PR0502MB3928E412B50ACE00B67B1131F5AA0AM6PR0502MB3928_"
--_000_AM6PR0502MB3928E412B50ACE00B67B1131F5AA0AM6PR0502MB3928_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi team,
i donnt know if this is the relevant group but i was sdviced to ask here.
how can i change the snort log output to Json format so i could send the lo=
gs to my Kibana i have tried multiple solutions but non of the worked.
i am running snort 2.9.7 if there is a command line option to update my sno=
rt installation please let me know.
Alex.
Sent from Outlook<http://aka.ms/weboutlook>
--_000_AM6PR0502MB3928E412B50ACE00B67B1131F5AA0AM6PR0502MB3928_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
Hi team,</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
i donnt know if this is the relevant group but i was sdviced to ask here.</=
div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
how can i change the snort log output to Json format so i could send the lo=
gs to my Kibana i have tried multiple solutions but non of the worked.</div=
>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
i am running snort 2.9.7 if there is a command line option to update my sno=
rt installation please let me know.</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
Alex.</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id=3D"Signature">
<div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt; color:#000000; ba=
ckground-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
Sent from <a href=3D"http://aka.ms/weboutlook">Outlook</a></div>
</div>
</body>
</html>
--_000_AM6PR0502MB3928E412B50ACE00B67B1131F5AA0AM6PR0502MB3928_--
--===============7601811293990736192==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel
Please visit http://blog.snort.org for the latest news about Snort!
--===============7601811293990736192==--