Detect Open ports

Elastic Stack Elasticsearch
1

I have a log message that I get once per day
[timestamp] | [host name]| Open ports: 80, 22,443, 8080

A few days later I found an additional port is open
[timestamp] | [host name]| Open ports: 80, 22,443, 8080, **8220**

How can I detect/get an alert from ELK logs which additional port is open?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.