mosiur/brilliant-monitoring
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Created the grok parser for EXECVE using CHATGPT and applied it to the pipeline now EXECVE is working properly

Browse Source
This commit is contained in:
Mosiur Rahman
2026-08-19 05:40:01 +00:00
parent 12ef293314
commit ba0fd1d736
2 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
commit_msg.txt
View File

@@ -1 +1 @@
I have added second parsing pattern for SYSCALL because in the first pattern if the key is null then the full parser fails. So I have disabled break_on_match and added second parser for key=(null)
Created the grok parser for EXECVE using CHATGPT and applied it to the pipeline now EXECVE is working properly