Making post alert script for snort

I`m trying to make a script that trigger an action if 5 snort rules ware broken in 24 hours interval.

I`m putting all my snort logs in alert.log
Can some one help me to make a script that motor this file and do an action (echo for example) if 5 new lines appear int that file in less then 24 hours?

After some research i think i found a different approach.
Can some one help me with a simple script that count enteritis, stop on the fith and print a message?

Answer

Attribution
Source : Link , Question Author : Weiss Willy , Answer Author : Community

Leave a Comment