For_log analysis security threats

-----For fireball log  ( real time log analysis)

1)  journalctl -u firewalld -f

--Ip table ke liye 

2) tail -f /var/log/syslog | grep 'iptables'

----Ufw ke liye 

3) tail -f /var/log/ufw.log

Ufw log read --

1.   cat /var/log/ufw.log | less .deb

Or.

2. sudo tail -f /var/log/ufw.log

Spesific blocked requests

3. grep "BLOCK" /var/log/ufw.log

Only for specific port log 

1.  grep 'DPT=80' /var/log/syslog

For droped package 

2. grep 'DROP' /var/log/syslog