eris::log::context::snort - Parses the Snort and Suricata alert logs
version 0.007
This parses data in the Snort and Suricata alert logs into structured data.
Matches the literal string 'snort' and 'suricata'
Extracts information from the Snort and Suricata alert logs
name => rule name class => rule classification pri => rule priority proto_app => protocol
And
src_ip src_port dst_ip dst_port
Tags messages with 'security' and 'ids'.
eris::log::contextualizer, eris::role::context
Brad Lhotsky <brad@divisionbyzero.net>
This software is Copyright (c) 2015 by Brad Lhotsky.
This is free software, licensed under:
The (three-clause) BSD License
To install eris, copy and paste the appropriate command in to your terminal.
cpanm
cpanm eris
CPAN shell
perl -MCPAN -e shell install eris
For more information on module installation, please visit the detailed CPAN module installation guide.