@@ -10,25 +10,29 @@ themeName: graylog-theme
1010actions :
1111 - title : Exercise - Investigation
1212 shell : >-
13- paste -d'\n' /etc/graylog/log_data/northstar_database_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_vpn_multi_badip_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
13+ sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_database_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201 & sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_vpn_multi_badip_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
14+ #paste -d'\n' /etc/graylog/log_data/northstar_database_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_vpn_multi_badip_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
1415 icon : backup
1516 timeout : 900
1617
1718 - title : Exercise - Customer-Facing Deliverable
1819 shell : >-
19- paste -d'\n' /etc/graylog/log_data/northstar_database_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
20+ sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_database_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
21+ #paste -d'\n' /etc/graylog/log_data/northstar_database_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
2022 icon : backup
2123 timeout : 900
2224
2325 - title : Exercise - Data Routing
2426 shell : >-
25- paste -d'\n' /etc/graylog/log_data/northstar_firewall_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_vpn_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_hr_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_loadbalancer_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
27+ sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_firewall_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201 & sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_vpn_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201 & sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_hr_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201 & sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_loadbalancer_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
28+ #paste -d'\n' /etc/graylog/log_data/northstar_firewall_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_vpn_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_hr_REPLACEME_logs.jsonl /etc/graylog/log_data/northstar_loadbalancer_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
2629 icon : backup
2730 timeout : 900
2831
2932 - title : Exercise - Enrichment
3033 shell : >-
31- paste -d'\n' /etc/graylog/log_data/northstar_vpn_multi_badip_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
34+ sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_vpn_multi_badip_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
35+ #paste -d'\n' /etc/graylog/log_data/northstar_vpn_multi_badip_REPLACEME_logs.jsonl | sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
3236 icon : backup
3337 timeout : 900
3438
@@ -78,4 +82,4 @@ actions:
7882 shell : >-
7983 sed -e 's/"timestamp": "REPLACEME",//' -e 's/}$//' /etc/graylog/log_data/northstar_vpn_REPLACEME_logs.jsonl | awk -v seed=$RANDOM 'BEGIN {srand(seed);a=strftime("%s")-3600;} { a+=int((11 * rand())) ;print($0, ",\"timestamp\": \"" a "\"}"); }' | tr '\n' '\0' | nc -w 1 localhost 12201
8084 icon : backup
81- timeout : 900
85+ timeout : 900
0 commit comments