Re: [SLUG] script to analyse syslog in realtime

2013-02-18 Thread Martin Visser
I wrote this Perl script for use in a project where I had get an understanding of the rate RADIUS requests coming in. I impressed myself (as a very lapsed programmer) that I figured out how to (a) write a SIGnal handler and (b) put POD documentation in the file. The most basic usage is simply :

Re: [SLUG] script to analyse syslog in realtime

2013-02-14 Thread Chris Barnes
that looks exactly like the type of script I'm looking for. I'll give it a crack later tonight. thanks very much! On Fri, Feb 15, 2013 at 2:20 PM, Matthew Hannigan wrote: > If you want something light for ad-hoc checks I use a bit of perl like > this that uses a dumb match of part of the da

Re: [SLUG] script to analyse syslog in realtime

2013-02-14 Thread Matthew Hannigan
If you want something light for ad-hoc checks I use a bit of perl like this that uses a dumb match of part of the date-time string as a key into a hash of counts: #!/usr/bin/perl # # use strict; use warnings; my %events_per_minute; while(<>) { chomp; if (m,to s

Re: [SLUG] script to analyse syslog in realtime

2013-02-14 Thread Amos Shapira
In addition to LogStash/Kibana, perhaps you want to look at something that just sends the events to statsd (https://github.com/etsy/statsd/) which then aggregates them into counters and ships the results to Graphite ( http://graphite.wikidot.com/). I have have yet to get personal experience with L

Re: [SLUG] script to analyse syslog in realtime

2013-02-13 Thread David Gillies
On 14/02/13 11:48, Chris Barnes wrote: > Hi everyone, > > my firewall logs everything to a syslog server - new connections, > terminated connections, etc > > basically what im trying to do is analyse the syslog in realtime looking > for a specific string which indicates a new connection has been >

Re: [SLUG] script to analyse syslog in realtime

2013-02-13 Thread grove
On Thu, 14 Feb 2013, Chris Barnes wrote: any suggestions? SPLUNK?! -- Rachel Polanskis Kingswood, Greater Western Sydney, Australia gr...@zeta.org.auhttp://www.zeta.org.au/~grove/grove.html The more an answer costs, the more respect it carries. -- SLU

[SLUG] script to analyse syslog in realtime

2013-02-13 Thread Chris Barnes
Hi everyone, my firewall logs everything to a syslog server - new connections, terminated connections, etc basically what im trying to do is analyse the syslog in realtime looking for a specific string which indicates a new connection has been established, and to count the number of occurrences o