Hello. I’m starting with ruby.
I have à log file in which I managed to introduce some tags in order to
extract informations more easily.
i.e. :
blabla
uninteresting text
…
<SOURCE_IP_ADRESS>123.456.789.123</SOURCE_IP_ADRESS>
.
.
.
uninteresting text
I would like to place the string between tags in variables :date,
ip_source, etc. each time an attack occurs.
Then I will place the content of the variables in a database.
Then I will use Ror to make a beautiful visualisation tool !!
How could I do to answer at my two first wishes?
If it seems to you stupid to use tags in order to parse this log file,
do you have another solution?
Thanks a lot.
Tainchebraye !