Suricata

Jason Ish wrote:

With Hiredis, it looks like this is done by sending a raw "AUTH" message.

- eve-log:
enabled: yes
filetype: unix_stream #regular|syslog|unix_dgram|unix_stream|redis
filename: /tmp/suricata-json.sock

#define REDIS_HOST "127.0.0.1"
#define REDIS_PORT 6380
#define REDIS_PASSWORD "qazWSX123"
#define REDIS_KEY "logs"
#define SOCKET_PATH "/tmp/suricata-json.sock"

=======
The suricata log is output through unix_stream, and then the log is output to redis through the program. The output efficiency is higher than the native suricata and takes up less CPU. redis key uses list type。

Compile this C code and then execute the program。 redis： LPOP logs