SNORT plugin coming?
|
|
PCI compliance has as one of its requirements as a notification of security breach attempts from an IDS/IPS, not just logging. Any plans to do such in the near future? |
|
|
That is a most excellent suggestion. It seems like it would be very easy,—since Scout is simply Ruby, one could just parse the log file and grab what they wanted! Check out our Rails Request plugin for details on how we implemented a simple log parser that reads the log from the end for a low memory footprint, and quick, detailed reads: |
