Skip to content

Instantly share code, notes, and snippets.

@Zobber

Zobber/suricata_geoip

Created April 6, 2020 15:46
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Zobber/f78049b385c8a85a3f3aa3072e1bc9bc to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Zobber/f78049b385c8a85a3f3aa3072e1bc9bc to your computer and use it in GitHub Desktop.
Download ZIP
Raw
suricata_geoip
cat eve.json | jq -c 'select(.alert and .http) | [.src_ip,.dest_ip,.alert.signature,.alert.severity,.http.hostname]'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment