|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/logrhythm-custom-mpe-rules-parsing-the-custom-log-sources/
课程评论：没有评论
Coursera课程总结：LogRhythm自定义MPE规则 - 解析自定义日志源 本课程由具有十年以上网络安全工程经验的Adeel主讲，专为LogRhythm SIEM管理员设计，旨在帮助学员掌握如何解析自定义日志源并将其集成到LogRhythm中。 **课程目标：** * 熟练使用正则表达式（Regex）编写自定义解析规则。 * 创建LogRhythm自定义解析器。 * 成功将自定义日志源集成到LogRhythm SIEM平台。 **课程内容（共七个主要部分）：** 1. **正则表达式概述与基础编写：** 介绍正则表达式的基本概念和常用语法。 2. **日志类型 - 单行和多行日志：** 区分并学习如何处理不同格式的日志。 3. **消息处理引擎（MPE）：** 深入了解MPE的工作原理，包括策略、规则构建器、基础规则和子规则。 4. **LogRhythm字段与标签：** 学习理解和使用LogRhythm中的关键字段和标签。 5. **自定义日志源创建与集成：** 指导学员如何创建和集成新的自定义日志源。 6. **自定义解析器创建：** 教授创建和应用自定义解析器的具体步骤。 7. **MPE性能监控：** 学习如何监控和优化MPE的运行性能。 无论您是希望为已有的LogRhythm环境集成自定义日志源，还是想深入了解LogRhythm的日志解析机制，本课程都将为您提供实用的技能和知识。
Hello everyone, and welcome to the LogRhythm Custom MPE Rules Course. in this course, we will Parse Custom Log Sources by using Regular ExpressionsMy name is Adeel and I am a Cyber Security Engineer with more than 10 years of experience.I will be your instructor in this course.If you are working on LogRhythm SIEM as an administrator and you have custom log sources in your environment that you want to integrate with LogRhythm, then this is the perfect course for you.Also, if you want to learn about custom parsing in LogRhythm and want to know how parsing works in LogRhythm, you can join this course.By the time you are done with this course, you are going to be skilled in writing regex in LogRhythm, creating custom parsers in LogRhythm, and also integrating custom log sources with LogRhythm.My goal in this course is to help you with creating and applying a custom parser and integrating custom log sources.I want to take a few minutes and I want to walk through the curriculum because I need you to understand what you are going to learn before you jump into the course material.Let's go ahead and take a look at that right now.This course is broken up into 7 main sections.Number one is Regex Overview & Basic Regex Writing.Number two is log types-single-line and multi-line log.Number three is the Message Processing Engine - Policy, Rule Builder, Base Rule, and Sub Rules.Number four is LogRhythm fields and tags.Number five is Custom Log Source Creation & Integration.Number six is Custom Parser Creation.Number Seven is MPE Performance Monitoring.
