Security Log Analyzer: attack detection for 50+ log formats
Pricing
$20.00 / 1,000 log analyzeds
Detects the format of a security log and finds attacks in it: brute force, password spraying, logins after failures, web scanning and injection, cloud privilege changes, suspicious commands, port scans. Entra ID, Windows events, auth.log, nginx/Apache, CloudTrail, Okta, firewalls, EDR and more.
You can access the Security Log Analyzer: attack detection for 50+ log formats programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.
1import { ApifyClient } from 'apify-client';2
3// Initialize the ApifyClient with your Apify API token4// Replace the '<YOUR_API_TOKEN>' with your token5const client = new ApifyClient({6 token: '<YOUR_API_TOKEN>',7});8
9// Prepare Actor input10const input = {11 "logText": `Nov 5 06:00:01 web-01 sshd[4100]: Failed password for root from 203.0.113.77 port 50000 ssh212Nov 5 06:00:02 web-01 sshd[4101]: Failed password for root from 203.0.113.77 port 50001 ssh213Nov 5 06:00:03 web-01 sshd[4102]: Failed password for admin from 203.0.113.77 port 50002 ssh214Nov 5 06:00:04 web-01 sshd[4103]: Failed password for admin from 203.0.113.77 port 50003 ssh215Nov 5 06:00:05 web-01 sshd[4104]: Failed password for ubuntu from 203.0.113.77 port 50004 ssh216Nov 5 06:00:06 web-01 sshd[4105]: Failed password for ubuntu from 203.0.113.77 port 50005 ssh217Nov 5 06:00:07 web-01 sshd[4106]: Failed password for test from 203.0.113.77 port 50006 ssh218Nov 5 06:00:08 web-01 sshd[4107]: Failed password for test from 203.0.113.77 port 50007 ssh219Nov 5 06:00:09 web-01 sshd[4108]: Failed password for oracle from 203.0.113.77 port 50008 ssh220Nov 5 06:00:10 web-01 sshd[4109]: Failed password for oracle from 203.0.113.77 port 50009 ssh221Nov 5 06:00:11 web-01 sshd[4110]: Failed password for pi from 203.0.113.77 port 50010 ssh222Nov 5 06:00:12 web-01 sshd[4111]: Failed password for pi from 203.0.113.77 port 50011 ssh2`23};24
25// Run the Actor and wait for it to finish26const run = await client.actor("logtriage/security-log-analyzer").call(input);27
28// Fetch and print Actor results from the run's dataset (if any)29console.log('Results from dataset');30console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);31const { items } = await client.dataset(run.defaultDatasetId).listItems();32items.forEach((item) => {33 console.dir(item);34});35
36// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docsThe Apify API client for JavaScript is the official library that allows you to use Security Log Analyzer: attack detection for 50+ log formats API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.
Install the apify-client
$npm install apify-clientOther API clients include: