Thanasis Naskos / CUREX - Knowledge Extraction Analytics - KEA

Download as
Browse Code ยป

Commit a063d21c74808a7b274c7c423807b952ab24862b

Authored by Thanasis Naskos
1 parent 0d86ee79db
Exists in master and in 1 other branch new_model_rabbitmq_server

Adding incident messages to Rsyslog report

Showing 2 changed files with 2 additions and 1 deletions

MLTD/src/ReportSyslog.py View file @ a063d21
... ... @@ -10,5 +10,5 @@
10 10 formatter = logging.Formatter(' %(message)s')
11 11 handler.setFormatter(formatter)
12 12 my_logger.addHandler(handler)
13   - my_logger.critical(f'source_ip: {source_ip} target_ip: {target_ip} asset: {asset_id} risk: {risk} timeframe: {timeframe}')
  13 + my_logger.critical(f'source_ip: {source_ip} target_ip: {target_ip} asset: {asset_id} risk: {risk} incident: A possible risk is predicted timeframe: {timeframe}')
OD/src/main/java/edu/auth/od_pcap_mcod/report/RsyslogHandler.java View file @ a063d21
... ... @@ -34,6 +34,7 @@
34 34 + " Target_IP: " + outlier.getPacket().getTargetIP()
35 35 + " Risk: " + outlier.getValues()[0]
36 36 + " IncidentDate: " + outlier.getActualTime()
  37 + + " Incident: Packet loss increased - Possible indication of Dos attack"
37 38 + " Timeframe: 0 ");
38 39 } catch (Exception e) {
39 40 e.printStackTrace();