April 2019
Intermediate to advanced
303 pages
6h 16m
English
Content preview from Cybersecurity Ops with bash
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapter 18. Writing Log Entries
As you write your scripts, you may want to create formal log entries for important events. Both Windows and Linux provide easy mechanisms for writing to their respective logging systems. Be sure to follow best practices when writing log entries to ensure they are useful. A good log entry has the following characteristics:
-
Uses consistent nomenclature and grammar
-
Provides context (indicating who, where, and when)
-
Is specific (indicating what)
Commands in Use
In this chapter, we introduce eventcreate and logger.
eventcreate
The eventcreate command is used in Windows environments to write entries to the event log.
Common command options
- /d
-
A detailed description of the event
- /id
-
A numeric event ID
- /l
-
The name of the event log for which to write the entry
- /so
-
The source of the event
- /t
-
The type of event
logger
The logger command is used in many Linux distributions to write events to the system log.
Common command options
- -s
-
Also write the event to stderr
- -t
-
Tag the event with the specified value
Writing Windows Logs
The eventcreate command is used to write entries to the Windows event log. In order to use it, several pieces of information must be provided:
-
Event ID (
/id): A number to identify the event. Any number between 1 and 1,000 is valid. -
Event type (
/t): A category that best describes the event. Valid options are as follows:-
ERROR -
WARNING -
INFORMATION -
SUCCESSAUDIT -
FAILUREAUDIT
-
-
Event log name ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.