[Oisf-users] files-json.log

[F.Tremblay]

Hello,

Now that the files-json.log is gone, how can I tail only the "magic" from
the eve.json

previously: tail -n200 -f /var/log/suricata/files-json.log | jq '.magic'

Thanks. cheers.

F.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190501/5829200b/attachment.html>