Skip to content

updated log parser#1

Open
scott1138 wants to merge 3 commits intosecurethelogs:masterfrom
scott1138:master
Open

updated log parser#1
scott1138 wants to merge 3 commits intosecurethelogs:masterfrom
scott1138:master

Conversation

@scott1138
Copy link
Copy Markdown

@scott1138 scott1138 commented Feb 10, 2021 •
edited
Loading

Hi! I was looking for something to parse a rather large file and came across your script. It didn't do exactly what I wanted but it gave me an idea on what I would want to do. Check it out and see what you think. Here is what the output looks like and how you can call the script:

PS C:\> .\Get-AzureNSGData.ps1 -SrcIPFilter 10.2.8.6 -DstIPFilter 40.112.242.1
File Location: svcconn.json
Processing 1377 flows...
Execution Time: 00:12

TimeStamp    SourceIP SourcePort DestinationIP DestinationPort Protocol TrafficFlow Action Rule
---------    -------- ---------- ------------- --------------- -------- ----------- ------ ----
14:07:31.000 10.2.8.6 53048      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:07:54.000 10.2.8.6 53048      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:27:28.000 10.2.8.6 53345      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:27:51.000 10.2.8.6 53345      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:37:31.000 10.2.8.6 53501      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:37:54.000 10.2.8.6 53501      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:57:28.000 10.2.8.6 53845      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:57:50.000 10.2.8.6 53845      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound

@scott1138 scott1138 marked this pull request as ready for review February 10, 2021 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@scott1138