-
Notifications
You must be signed in to change notification settings - Fork 26
TESTAR Log Oracles
Fernando Pastor edited this page Jan 15, 2024
·
1 revision
Enable the Oracle to detect suspicious messages in log files and standard output of commands.
A list of paths of log files to monitor.
Example: access.log;error.log;mail.log
A list of commands of which standard output should be monitored.
Users are free to execute system commands, and then TESTAR will read the standard output to apply the Oracle.
Example of command that will recursively search for "error" in all .log files in the specified directory and its subdirectories:
findstr /s "error" C:\Users\testar\*.log
Regular expressions ORACLE to find suspicious messages in the logs or in the standard output of executed commands.
A typically suspicious message to detect is: .*([Ee]xception|[Ee]rror).*