Mosiur Rahman
|
ba0fd1d736
|
Created the grok parser for EXECVE using CHATGPT and applied it to the pipeline now EXECVE is working properly
|
2026-08-19 05:40:01 +00:00 |
|
Mosiur Rahman
|
12ef293314
|
I have added second parsing pattern for SYSCALL because in the first pattern if the key is null then the full parser fails. So I have disabled break_on_match and added second parser for key=(null)
|
2026-08-19 04:09:12 +00:00 |
|
Mosiur Rahman
|
0f060b9315
|
I have created a conditional grok filter for audit log and seperated the SYSCALL event from audit. Created a parser for SYSCALL.
|
2026-08-19 03:49:50 +00:00 |
|
Mosiur Rahman
|
146264b34d
|
Added different index for cpanel kernel log - Added route, added new pipeline, added new processor and sink inside the pipeline also denied logs with log_source==kernel.log towards all-log index
|
2026-08-13 08:58:10 +00:00 |
|
Mosiur Rahman
|
beae59543c
|
Convert helm-charts-observability to regular directory
|
2026-08-13 07:38:55 +00:00 |
|