Query ELSA in browser with time
18 views
Skip to first unread message
b3b0
Jan 3, 2018, 11:17:35 AM1/3/18
to enterprise-log-search-and-archive
https://elsaserver/elsa-query/?query_string=srcip=10.10.10.10%20dstip=10.11.11.11
I see that you can specify src, dst, class and etc in your query string, but is it possible to add the time to this string? I'm trying to be able to programmatically threat hunt. ELSA is a great tool to do that with.
I see that you can specify src, dst, class and etc in your query string, but is it possible to add the time to this string? I'm trying to be able to programmatically threat hunt. ELSA is a great tool to do that with.
Reply all
Reply to author
Forward
0 new messages