https://home.regit.org/tags/splunk/ Recent content in Splunk on To Linux and beyond ! Hugo fr Fri, 07 Mar 2014 23:19:37 +0000 https://home.regit.org/2014/03/suricata-ulogd-splunk-logstash/ Fri, 07 Mar 2014 23:19:37 +0000 https://home.regit.org/2014/03/suricata-ulogd-splunk-logstash/ <h4 id="some-progress-on-the-json-side">Some progress on the JSON side</h4> <p>Suricata 2.0-rc2 is out and it brings some progress on the JSON side. The logging of SSH protocol has been added:</p> <p><a href="https://home.regit.org/uploads/2014/03/Screenshot-from-2014-03-07-185021.png"><img loading="lazy" decoding="async" src="https://home.regit.org/uploads/2014/03/Screenshot-from-2014-03-07-185021.png" alt="Screenshot from 2014-03-07 18:50:21" width="629" height="357" class="aligncenter size-large wp-image-2051" srcset="https://home.regit.org/uploads/2014/03/Screenshot-from-2014-03-07-185021.png 629w, https://home.regit.org/uploads/2014/03/Screenshot-from-2014-03-07-185021-300x170.png 300w" sizes="auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px" /></a></p> <p>and the <a href="https://github.com/inliniac/suricata/commit/6c3c234ca5583f420371bc706716e8ae1b0c5a61">format of timestamp has been updated</a> to be ISO 8601 compliant and it is now named <code>timestamp</code> instead of <code>time</code>.</p>