-1

Can anyone help me create a script that adds [ SURICATA ] in this log file?

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SCAN SQL Injection Attempt (Agent uil2pn)"; flow:to_server,established; content:"$
Zach L
  • 712
  • 4
  • 18

1 Answers1

0

Try this:

sed -i 's/.*:"/&[ SURICATA ]/' yourfile.log
SLePort
  • 15,211
  • 3
  • 34
  • 44