[Autogenerated] Ah yes,
that glorious orange tinge to the end of our day or the sunset on our module,
a glorious module where we've seen how we can use orc to
read and process data from our logs.
So we begin by taking a look at the journal C T L command with this.
We're looking at combined logs.
So we don't need to be concerned about the log file.
We can use minus U to filter on the service unit.
In our case,
we were looking at SSH minus G allows us to search using repo our output
of journal C T L without calling re apps separately.
We then were looking at sorting data.
We can simply pipe the output of our command through to the source command.
Source minus U gives us a unique list rather than having duplicate entries,
but we can do everything within org.
And that's where we came across that function that
looks misspelled really a sortie.
But remember it's our ascending source on indexes of an array.
So we are then sorting the indices on an array.
We just need to create an array with our IP
addresses being the associative index.
So we can then go through and print out the index name from our array,
which is, in fact,
then the IP address that we probably want to block and to
be able to block those IP addresses, we can feed them into our firewall system.
We are showing with firewall D but there are other firewall
management systems you could also use,
you just want to take care and ensure that you're not blocking your own
IP addresses or IP addresses that should have valid access but might just
have misspelled a user name and that's it.
We are done and dusted, but we're not done and dusted only with this module.
Do you know what we are done and dusted with this said an arc course,
I'm truly grateful that you've invested in your own learning
and invested in it with one of my courses.
I do hope you're going to find this really useful and I wish you the
most sincere congratulations on reaching the end.