之后添加一些文字:"用sed?

时间:2017-02-10 17:09:31

标签: sed suricata

任何人都可以帮我创建一个在此日志文件中添加[ SURICATA ]的脚本吗?

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SCAN SQL Injection Attempt (Agent uil2pn)"; flow:to_server,established; content:"$

1 个答案:

答案 0 :(得分:0)

试试这个:

sed -i 's/.*:"/&[ SURICATA ]/' yourfile.log