Hi everyone,
my firewall logs everything to a syslog server - new connections,
terminated connections, etc
basically what im trying to do is analyse the syslog in realtime looking
for a specific string which indicates a new connection has been
established, and to count the number of occurrences
On Thu, 14 Feb 2013, Chris Barnes wrote:
any suggestions?
SPLUNK?!
--
Rachel Polanskis Kingswood, Greater Western Sydney, Australia
gr...@zeta.org.auhttp://www.zeta.org.au/~grove/grove.html
The more an answer costs, the more respect it carries.
--
On 14/02/13 11:48, Chris Barnes wrote:
Hi everyone,
my firewall logs everything to a syslog server - new connections,
terminated connections, etc
basically what im trying to do is analyse the syslog in realtime looking
for a specific string which indicates a new connection has been