loading json file

[ashokchokalingam]

Hi,

I ma having an opensource log management which will send the logs over syslog and i convert it using logstash to json format and i would like to look for sigma rules using hayabusa. how can i load json log file as an input. The below is the output i get.

[YamatoSecurity]

I don't think it can handle those kind of custom JSON files. Only JSON exported from HELK or Splunk at the moment.

[ashokchokalingam]

Thank you so much for the reply, how do i load splunk or elk exported data? could you share the syntax if possible? Regards Ashok

…

On Mon, Nov 11, 2024 at 2:16 PM Zach Mathis (田中ザック) < ***@***.***> wrote: I don't think it can handle those kind of custom JSON files. Only JSON exported from HELK or Splunk at the moment. — Reply to this email directly, view it on GitHub <#1483 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AH7HDRLSI4OBBH5EOOG7H2L2AB7WFAVCNFSM6AAAAABRRLBNWCVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCMRRGI4TIMI> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>