alphasoc / nfr

A lightweight tool to score network traffic and flag anomalies
https://alphasoc.com
Other
122 stars 19 forks source link

Output alerts as a stream of events #65

Closed tg closed 6 years ago

tg commented 6 years ago

After receiving alerts from API, NFR writes a single JSON object which then contains a list of events (applies to file output and syslog). This is not very usable and we should write stream of JSON objects – one object per event. This will also simplify adding new output formats.