blob: 9ffad6ac3c0e44a41535a80ff48df8b8309fae6f (
plain)
1
2
3
4
5
6
7
8
9
10
|
#
# @synopsis: tag-ssh-msgs
# @description: Tag interesting SSH log messages
#
;UPDATE all_logs
SET log_tags = json_concat(log_tags, '#ssh.invalid-user')
WHERE log_text LIKE '%Invalid user from%'
;SELECT 'Tagged ' || changes() || ' messages';
|