homelabsecuritymonitoring/Logging_-_Linux--Viewing_the_events_in_Humio.html at main · BoredHackerBlog/homelabsecuritymonitoring · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
<!doctype html>
<html>
<head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
  <title>Viewing the events in Humio</title>
  <meta name="generator" content="CherryTree">
  <link rel="stylesheet" href="res/styles3.css" type="text/css" />
</head>
<body>
<div class='page'><h1 class='title'>Viewing the events in Humio</h1><br/><h1>Viewing the events in Humio<br /></h1><br /><h2>Data sources should show that there are some logs coming in</h2><br /><a href=""><img src="images/23-1.png" alt="images/23-1.png" /></a><br /><br /><h2>Doing the query groupby(@source) will show which log files are sending the data.</h2><br /><a href=""><img src="images/23-2.png" alt="images/23-2.png" /></a><br /><br /><h2>Looking at auth log:</h2><br /><h2>@hostname is host that&#39;s sending the logs.</h2><br /><a href=""><img src="images/23-3.png" alt="images/23-3.png" /></a><br /><br /><h2>Looking at zsh history:<br /></h2><a href=""><img src="images/23-4.png" alt="images/23-4.png" /></a></div>
</body>
</html>