Project

General

Profile

Actions

Feature #7062

open

redis: support authenticating against a redis server

Added by Jason Ish about 1 year ago. Updated 2 days ago.

Status:
New
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:

Description

With Hiredis, it looks like this is done by sending a raw "AUTH" message.


Files

suricata-redis-json.c (7.95 KB) suricata-redis-json.c yang xing, 08/04/2025 05:11 AM
Actions #1

Updated by yang xing 2 days ago

Jason Ish wrote:

With Hiredis, it looks like this is done by sending a raw "AUTH" message.

- eve-log:
enabled: yes
filetype: unix_stream #regular|syslog|unix_dgram|unix_stream|redis
filename: /tmp/suricata-json.sock

#define REDIS_HOST "127.0.0.1"
#define REDIS_PORT 6380
#define REDIS_PASSWORD "qazWSX123"
#define REDIS_KEY "logs"
#define SOCKET_PATH "/tmp/suricata-json.sock"

=======
The suricata log is output through unix_stream, and then the log is output to redis through the program. The output efficiency is higher than the native suricata and takes up less CPU. redis key uses list type。

Compile this C code and then execute the program。 redis: LPOP logs

Actions

Also available in: Atom PDF