v0.2.1 of the analyzer-d4-log released

Main changes

• change port to 1323

v0.2 of the analyzer-d4-log released

Main Changes

External tools for grokking

The main change in this release is the use of external tools for grokking log lines:

• Apache nifi using this template
  
• Elastic logstash using a configuration to be released soon.

MISP export

The second addition is the capability to export statistics to MISP as authentication-failure-report objects.
After MISP 2.4.129 it allows MISP to display a authentication failure report widget listing the top 100 ssh services abusers collected in D4:

Other changes

• csv export
• better Handling of redis-input EOF
• some bug fixes

SHA 256

bbeaf2343fc313a800fe592154312529b4146e5ec3e3cfbee0fe12f132c7d225  analyzer-d4-log

v0.1.1 of the analyzer-d4-log released

Main features

• Parses auth.log logs ssh failed logins pushed through D4
• Computes basics counts in redis
• Compiles html/svg representations of daily, monthly and yearly counts.

SHA 256

610d987338166df75749dff6d8254e0de5968b35e62de8fbdbe090d1c1925f92  analyzer-d4-log