Образовательный проект «SnakeProject» Михаила Козлова

⇒ Python ⇐

CISCO

Voice(Asterisk\Cisco)

Microsoft

Powershell

SQL\T-SQL

FreeBSD and Nix

1С

Общая

WEB Разработка

ORACLE SQL \ JAVA

Мото

Стрельба, пневматика, оружие

Саморазвитие и психология

Python: парсинг логов NPS

CISCO оборудование по радиусу аутентифицировалось на NPS сервере

Парсинг логов с отправкой по почте таков:

$curDate = Get-Date $curDate = $curDate.AddMinutes(-5) $from = New-Object -TypeName DateTime -ArgumentList @( $curDate.Year, $curDate.Month, $curDate.Day, $curDate.Hour, $curDate.Minute, 00 ) #$events_access = @(Get-WinEvent -FilterHashtable @{logName = 'Security'; ID = 6272; StartTime=$from}) | Select-Object Message #$events_denied = @(Get-WinEvent -FilterHashtable @{logName = 'Security'; ID = 6273; StartTime=$from}) | Select-Object Message $events_access = @(Get-EventLog -LogName Security -After $from -InstanceId 6272) | Select-Object Message $events_denied = @(Get-EventLog -LogName Security -After $from -InstanceId 6273) | Select-Object Message $body_access = $events_access | format-list -property * | out-string $body_denied = $events_denied | format-list -property * | out-string Function Send_message($subj, $body){ $mailprops = @{ From = 'nps@domain.ru' To = 'group@domain.ru' subject = $subj SMTPServer = '192.168.1.20' Port = 25 } Send-MailMessage @mailprops -Body $body -Encoding ([System.Text.Encoding]::UTF8) } if ($body_access) { $subject = 'Access to CISCO 5 minutes' Send_message $subject $body_access }else{ write-host "No access events found" } if ($body_denied) { $subject = 'Denied to CISCO 5 minutes' Send_message $subject $body_denied }else{ write-host "No denied events found" }

Комментарии пользователей