add things resources from the last 5 years over machines

This commit is contained in:
autistic-symposium-helpers 2024-10-15 09:59:09 +09:00 committed by GitHub
parent ac9c955e0b
commit b0a4e417ee
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
77 changed files with 2327 additions and 84 deletions

6
elasticsearch/README.md Normal file
View file

@ -0,0 +1,6 @@
# Elastalert hacks
```
curl -s logs.HOST.com:9200/logstash-2017.09.08/_search\?q=ty_params.ProcessName:osqueryd\&size=10000\&sort=@timestamp:desc | jq -r '.hits.hits[]._source.ty_params.Username' | sort | uniq -c | sort -nr
```