Hi, I have the squid logs being indexed by the log concentrator, and
assigned to the 'url' meta correctly, via a custom parser. I now need to
create an alert based on threat feed and notify on the event of a
detection of a url requested, which is pre...
Hi, I'm trying to create a custom parser for an appliance that generates
log messages in JSON format. Can anyone please help me point at any
resource that can help?I have created custom parsers earlier that
generated txt files, but I'm having difficu...
Hi Kevin, thanks for the details. I do have an ESA setup in the
environment. I have the feed planned to be updated automatically (if
feasible) or manually (once a week). I have the threat feed available in
a .csv format. I have never setup use cases ...
I finally managed to create a parser to process json based logs through
ESI tool; however, I'm looking forward in developing all future parsers
via LUA. Could someone please guide me to the resources available for
LUA parsing development?
Thank you for the insight Oj2tqPhEV7pi5mR8EY3PQXHtgPuI9Vk2SNDA9WW6hKQ=.
I appreciate it. Do you recommend to use LUA for the parsing or ESI?If
you could you please provide any existing parsers that process JSON
file, it would be of tremendous help. ...
Hi,I too tried to access the above RSA educational content, but get an
error (some XML DOM related) or the screen just remains freezed, as
shown. Could you please help? If the error is cannot reproduced, could
you please try accessing it and see it w...
