Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
Azure-Sentinel/Sample Data/Custom/NGINX_CL.json

387 строки
18 KiB
JSON
Исходник Ответственный История

[
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "3.180.71.3 - - [17/May/2015:08:05:26 +0000] \"GET /downloads/product_1 HTTP/1.1\" 404 324 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.21)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "91.234.194.89 - - [17/May/2015:08:05:22 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "80.91.33.133 - - [17/May/2015:08:05:07 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.17)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "37.26.93.214 - - [17/May/2015:08:05:38 +0000] \"GET /downloads/product_2 HTTP/1.1\" 404 319 \"-\" \"Go 1.1 package http\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "188.138.60.101 - - [17/May/2015:08:05:25 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "93.180.71.3 - - [17/May/2015:08:05:11 +0000] \"GET /downloads/product_1 HTTP/1.1\" 404 340 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.21)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "46.4.66.76 - - [17/May/2015:08:05:02 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (1.0.1ubuntu2)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "62.75.198.179 - - [17/May/2015:08:05:06 +0000] \"GET /downloads/product_2 HTTP/1.1\" 200 490 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "80.91.33.133 - - [17/May/2015:08:05:55 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.16)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "173.203.139.108 - - [17/May/2015:08:05:53 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "210.245.80.75 - - [17/May/2015:08:05:32 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (1.0.1ubuntu2)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "46.4.83.163 - - [17/May/2015:08:05:52 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "91.234.194.89 - - [17/May/2015:08:05:18 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "93.180.71.3 - - [17/May/2015:08:05:26 +0000] \"GET /downloads/product_1 HTTP/1.1\" 404 324 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.21)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "91.234.194.89 - - [17/May/2015:08:05:22 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "80.91.33.133 - - [17/May/2015:08:05:07 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.17)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "37.26.93.214 - - [17/May/2015:08:05:38 +0000] \"GET /downloads/product_2 HTTP/1.1\" 404 319 \"-\" \"Go 1.1 package http\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "188.138.60.101 - - [17/May/2015:08:05:25 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "93.180.71.3 - - [17/May/2015:08:05:11 +0000] \"GET /downloads/product_1 HTTP/1.1\" 404 340 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.21)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "46.4.66.76 - - [17/May/2015:08:05:02 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (1.0.1ubuntu2)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "62.75.198.179 - - [17/May/2015:08:05:06 +0000] \"GET /downloads/product_2 HTTP/1.1\" 200 490 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "80.91.33.133 - - [17/May/2015:08:05:55 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.16)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "173.203.139.108 - - [17/May/2015:08:05:53 +0000] \"GET /downloads/product_1 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "210.245.80.75 - - [17/May/2015:08:05:32 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (1.0.1ubuntu2)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "46.4.83.163 - - [17/May/2015:08:05:52 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 3:59:10.000 PM",
"Computer": "srv-elk-060",
"RawData": "91.234.194.89 - - [17/May/2015:08:05:18 +0000] \"GET /downloads/product_2 HTTP/1.1\" 304 0 \"-\" \"Debian APT-HTTP/1.3 (0.9.7.9)\"\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "020/12/04 12:07:22 [info] 1270#1270: *19939 client closed connection while waiting for request, client: 10.200.11.54, server: 0.0.0.0:443\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/04 12:19:17 [info] 1269#1269: *20213 peer closed connection in SSL handshake while SSL handshaking, client: 10.200.11.54, server: 0.0.0.0:443\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/04 12:22:48 [info] 1270#1270: *20327 client closed connection while waiting for request, client: 10.200.11.54, server: 0.0.0.0:443\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/04 12:22:49 [info] 1269#1269: *20330 peer closed connection in SSL handshake while SSL handshaking, client: 10.200.11.54, server: 0.0.0.0:443\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/04 12:22:49 [info] 1270#1270: *20331 client closed connection while waiting for request, client: 10.200.11.54, server: 0.0.0.0:443\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/04 12:36:27 [info] 1269#1269: *20475 peer closed connection in SSL handshake while SSL handshaking, client: 10.200.11.54, server: 0.0.0.0:443\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/05 03:28:39 [notice] 1268#1268: signal 10 (SIGUSR1) received from 416, reopening logs\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/05 03:28:39 [notice] 1268#1268: reopening logs\n",
"Type": "NGINX_CL",
"_ResourceId": ""
},
{
"TenantId": "9143fd29-fe92-43be-93e9-3f0a4bcaeef4",
"SourceSystem": "OpsManager",
"MG": "00000000-0000-0000-0000-000000000002",
"ManagementGroupName": "srv-elk-060",
"TimeGenerated [UTC]": "1/18/2021, 4:00:16.000 PM",
"Computer": "srv-elk-060",
"RawData": "2020/12/05 03:28:39 [notice] 1269#1269: reopening logs\n",
"Type": "NGINX_CL",
"_ResourceId": ""
}
]
Ссылка в новой задаче Показать git blame Копировать постоянную ссылку