Log Sources & Parser Status
Raw Log Ingestion Stream
Aug 13 12:01:05 auth-server sshd[123]: Failed password for root from 192.168.1.105 port 22 ssh2
Aug 13 12:01:10 auth-server sshd[124]: Failed password for root from 192.168.1.105 port 22 ssh2
Aug 13 12:01:15 auth-server sshd[125]: Failed password for root from 192.168.1.105 port 22 ssh2
10.0.5.50 - - [13/Aug/2026:12:05:10 +0530] "GET /index.php HTTP/1.1" 200 1024
45.22.19.8 - - [13/Aug/2026:12:15:22 +0530] "GET /admin/.env HTTP/1.1" 403 234
Aug 13 12:25:30 web-server apache: [error] client 10.0.1.15 SQL injection payload detected in URL
>_ Waiting for next payload...
Aug 13 12:01:10 auth-server sshd[124]: Failed password for root from 192.168.1.105 port 22 ssh2
Aug 13 12:01:15 auth-server sshd[125]: Failed password for root from 192.168.1.105 port 22 ssh2
10.0.5.50 - - [13/Aug/2026:12:05:10 +0530] "GET /index.php HTTP/1.1" 200 1024
45.22.19.8 - - [13/Aug/2026:12:15:22 +0530] "GET /admin/.env HTTP/1.1" 403 234
Aug 13 12:25:30 web-server apache: [error] client 10.0.1.15 SQL injection payload detected in URL
>_ Waiting for next payload...
Parsed & Normalized Data Structure
| Timestamp | IP Address | Detected Event | System Status |
|---|---|---|---|
| Aug 13 12:01:05 | 192.168.1.105 | Auth Failed | Warning |
| Aug 13 12:01:10 | 192.168.1.105 | Auth Failed | Warning |
| Aug 13 12:01:15 | 192.168.1.105 | Auth Failed | Warning |
| 13/Aug/2026:12:05:10 +0530 | 10.0.5.50 | Web Traffic | Normal |
| 13/Aug/2026:12:15:22 +0530 | 45.22.19.8 | Unauthorized Access | Warning |
| Aug 13 12:25:30 | 10.0.1.15 | SQLi Payload | Critical |