3 ms·
So, if I understood correctly is that having a test info like username password etc and then grepping the logs for those known test info values and if it return
by httpsterio 7y ago
So, if I understood correctly is that having a test info like username password etc and then grepping the logs for those known test info values and if it returns anything, then throw an error?
- meowface 7y agoYes. Ideally this would be an automated process, since it'd be tedious to grep every time you're messing around with logging, and you may sometimes forget to do it. If you're forwarding logs to something like ELK or Splunk, you can set up an alert / scheduled search to continuously check for those canary credentials every few minutes.