Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

Update InfobloxNIOS.json

This commit is contained in:
Ofer Shezaf 2022-05-23 16:31:40 +03:00
Родитель 48f1ccbb29
Коммит c3d41ee64a
1 изменённых файлов: 10 добавлений и 10 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

20
Sample Data/Syslog/InfobloxNIOS.json
Просмотреть файл

@ -216,7 +216,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f1a9b54aaaa 192.46.117.8#41959 (ddd.xxx.yyy.com): view Recursion View: query: ddd.xxx.yyy.com IN A +E(0)DV (192.46.116.155)",
"SyslogMessage": "client @0x7f1a9b54aaaa 192.46.117.8#41959 (ddd.xxx.yyy.com): view Recursion View: query: ddd.xxx.yyy.com IN A +E(0)DV (192.46.116.155)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -232,7 +232,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f1a891bbbb 192.46.117.8#28492 (xxxx.uksouth.cloudapp.azure.com): view Recursion View: query: xxxx.uksouth.cloudapp.azure.com IN A +E(0)DV (192.46.116.155)",
"SyslogMessage": "client @0x7f1a891bbbb 192.46.117.8#28492 (xxxx.uksouth.cloudapp.azure.com): view Recursion View: query: xxxx.uksouth.cloudapp.azure.com IN A +E(0)DV (192.46.116.155)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -248,7 +248,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c195fcccc 192.46.115.13#19964 (66.67.68.69.in-addr.arpa): view Recursion View: query: 66.67.68.69.in-addr.arpa IN PTR +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c195fcccc 192.46.115.13#19964 (66.67.68.69.in-addr.arpa): view Recursion View: query: 66.67.68.69.in-addr.arpa IN PTR +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -264,7 +264,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c1104dddd 192.46.115.12#36224 (xxx.yyy.net.edgekey.net): view Recursion View: query: xxx.yyy.net.edgekey.net IN A +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c1104dddd 192.46.115.12#36224 (xxx.yyy.net.edgekey.net): view Recursion View: query: xxx.yyy.net.edgekey.net IN A +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -280,7 +280,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c1c3feeee 192.46.115.12#22435 (xxx.yyy1.com): view Recursion View: query: xxx.yyy1.com IN A +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c1c3feeee 192.46.115.12#22435 (xxx.yyy1.com): view Recursion View: query: xxx.yyy1.com IN A +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -296,7 +296,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c1c3ffff 192.46.115.12#62835 (zzz.yyy1.com): view Recursion View: query: zzz.yyy1.com IN A +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c1c3ffff 192.46.115.12#62835 (zzz.yyy1.com): view Recursion View: query: zzz.yyy1.com IN A +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -312,7 +312,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c1c3faaaa 192.46.115.12#13502 (xxx.yyy.blob.storage.azure.net): view Recursion View: query: xxx.yyy.blob.storage.azure.net IN A +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c1c3faaaa 192.46.115.12#13502 (xxx.yyy.blob.storage.azure.net): view Recursion View: query: xxx.yyy.blob.storage.azure.net IN A +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -328,7 +328,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c1104bbbb 192.46.115.12#55440 (xxx.1111.2222.yyy.zz.COM): view Recursion View: query: xxx.1111.2222.yyy.zz.COM IN A +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c1104bbbb 192.46.115.12#55440 (xxx.1111.2222.yyy.zz.COM): view Recursion View: query: xxx.1111.2222.yyy.zz.COM IN A +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -344,7 +344,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c10b5cccc 192.46.115.12#14290 (CM11.xxx.yyy2.com): view Recursion View: query: CM11.xxx.yyy2.com IN A +E(0)DV (192.46.114.154)",
"SyslogMessage": "client @0x7f2c10b5cccc 192.46.115.12#14290 (CM11.xxx.yyy2.com): view Recursion View: query: CM11.xxx.yyy2.com IN A +E(0)DV (192.46.114.154)",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",
@ -360,7 +360,7 @@
"Facility": "daemon",
"Hostname": "computer1.domain.org",
"SeverityLevel": "info",
"SyslogMessage": "@0x7f2c1c8adddd 192.46.115.12#32925 (secure.yyy.zzz3.com): view Recursion View: query failed (SERVFAIL) for secure.yyy.zzz3.com/IN/A at query.c:8678",
"SyslogMessage": "client s@0x7f2c1c8adddd 192.46.115.12#32925 (secure.yyy.zzz3.com): view Recursion View: query failed (SERVFAIL) for secure.yyy.zzz3.com/IN/A at query.c:8678",
"ProcessID": "14265",
"HostIP": "156.72.152.18",
"ProcessName": "named",