Kb postgresql » test.json
| 1 |
INSERT INTO jsonb_test(data) VALUES ( '{ |
|---|---|
| 2 |
"_id" : "1-1465164342.148724-yoAiGv1c6FbZ", |
| 3 |
"ID" : "1-1465164342.148724-yoAiGv1c6FbZ", |
| 4 |
"Category" : [ |
| 5 |
"Recon.Scanning" |
| 6 |
], |
| 7 |
"Attach" : [ |
| 8 |
{ |
| 9 |
"ContentType" : "text/plain", |
| 10 |
"Content" : "1465164000 Initial Connect - tarpitting: 45.58.108.121 56371 -> 195.113.252.177 930", |
| 11 |
"Type" : [ |
| 12 |
"Syslog" |
| 13 |
] |
| 14 |
} |
| 15 |
], |
| 16 |
"msg_raw2" : "{\"DetectTime\":\"2016-06-05 22:00:00Z\",\"CreateTime\":\"2016-06-05 22:05:42Z\",\"Format\":\"IDEA0\",\"Target\":[{\"Port\":[930],\"IP4\":[\"195.113.252.177\"]}],\"_CESNET\":{\"StorageTime\":1465164612,\"Impact\":\"Remote host 45.58.108.121:56371 connected to honeypot to port 930\",\"EventTemplate\":\"labrea-001\"},\"Node\":[{\"Name\":\"cz.cesnet.mentat.warden_filer\",\"Type\":[\"Relay\"]},{\"Name\":\"cz.cesnet.au1.warden_filer\",\"Type\":[\"Relay\"]},{\"SW\":[\"LaBrea\"],\"Name\":\"cesnet.au1\",\"Type\":[\"Connection\",\"Tarpit\"]}],\"Description\":\"Connection attempt\",\"Attach\":[{\"ContentType\":\"text/plain\",\"Content\":\"1465164000 Initial Connect - tarpitting: 45.58.108.121 56371 -> 195.113.252.177 930\",\"Type\":[\"Syslog\"]}],\"Category\":[\"Recon.Scanning\"],\"CeaseTime\":\"2016-06-05 22:00:00Z\",\"Source\":[{\"Port\":[56371],\"IP4\":[\"45.58.108.121\"]}],\"ConnCount\":1,\"ID\":\"1-1465164342.148724-yoAiGv1c6FbZ\"}", |
| 17 |
"Description" : "Connection attempt", |
| 18 |
"ts" : "2016-06-05 22:00:00Z", |
| 19 |
"Node" : [ |
| 20 |
{ |
| 21 |
"Type" : [ |
| 22 |
"Relay" |
| 23 |
], |
| 24 |
"Name" : "cz.cesnet.mentat.warden_filer" |
| 25 |
}, |
| 26 |
{ |
| 27 |
"Name" : "cz.cesnet.au1.warden_filer", |
| 28 |
"Type" : [ |
| 29 |
"Relay" |
| 30 |
] |
| 31 |
}, |
| 32 |
{ |
| 33 |
"SW" : [ |
| 34 |
"LaBrea" |
| 35 |
], |
| 36 |
"Type" : [ |
| 37 |
"Connection", |
| 38 |
"Tarpit" |
| 39 |
], |
| 40 |
"Name" : "cesnet.au1" |
| 41 |
} |
| 42 |
], |
| 43 |
"ts_u" : 1465164612.12068, |
| 44 |
"Format" : "IDEA0", |
| 45 |
"_CESNET" : { |
| 46 |
"Impact" : "Remote host 45.58.108.121:56371 connected to honeypot to port 930", |
| 47 |
"EventTemplate" : "labrea-001", |
| 48 |
"StorageTime" : 1465164612 |
| 49 |
}, |
| 50 |
"class2" : "idea", |
| 51 |
"DetectTime" : "2016-06-05 22:00:00Z", |
| 52 |
"Source" : [ |
| 53 |
{ |
| 54 |
"Port" : [ |
| 55 |
56371 |
| 56 |
], |
| 57 |
"IP4" : [ |
| 58 |
{ |
| 59 |
"ip" : "45.58.108.121", |
| 60 |
"max" : "45.58.108.121", |
| 61 |
"min" : "45.58.108.121" |
| 62 |
} |
| 63 |
] |
| 64 |
} |
| 65 |
], |
| 66 |
"CeaseTime" : "2016-06-05 22:05:42Z", |
| 67 |
"ConnCount" : 1, |
| 68 |
"CreateTime" : "2016-06-05 22:05:42Z", |
| 69 |
"Target" : [ |
| 70 |
{ |
| 71 |
"Port" : [ |
| 72 |
930 |
| 73 |
], |
| 74 |
"IP4" : [ |
| 75 |
{ |
| 76 |
"ip" : "195.113.252.177", |
| 77 |
"max" : "195.113.252.177", |
| 78 |
"min" : "195.113.252.177" |
| 79 |
} |
| 80 |
] |
| 81 |
} |
| 82 |
] |
| 83 |
}'); |