0

just need simple regex I can use to match action from firewall logs. My log looks like this I want to extract just action="whatewer_it_could_be"

repeat-count="0" action="NONE" threat-severity="HIGH"

thank you

/edit I need just regex to put into our external software which is parsing raw logs

0

You did not tell us the OS you are using. Assuming Linux or similar OS, you can awk to extract the needed value from a log file following the same format shown above.

awk '{ print $2 }' /path/to/log/file | awk -F '=' '{ print $2 }'

You can grep for specific lines (before awk) if you want for example to extract them for specific threat-severity.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.