Skip to content

Instantly share code, notes, and snippets.

# main config
topicprefix = /topic/
main_collective = bke
collectives = bke
libdir = /usr/libexec/mcollective
logfile = /var/log/mcollective.log
loglevel = info
daemonize = 1
classesfile = /var/lib/puppet/state/classes.txt
<%=
yaml = ["---"]
keys = scope.to_hash.keys.reject {|k| k.to_s =~ /(uptime_seconds|timestamp|free)/}
keys.sort.each {|k| yaml << "#{k}: #{scope.lookupvar(k).to_s}"}
yaml.join("\n ")
%>
module MyModule
class API < Grape::API
version 'v3', using: :path
format :json
content_type :txt, 'text/plain'
get ":snippet_id/raw" do
@snippet = find(params[:snippet_id])
content_type 'text/plain'
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: compile error
/etc/puppet/environments/jira/modules/confluence/templates/seraph_config.xml.erb:10: syntax error, unexpected '{'
...at((@cas_login_url?service=$\{originalurl\}</param-value>
^
------ Template -------
<% if @cas_enable -%>
<init-param>
<param-name>login.url</param-name>
<param-value><%=@cas_login_url %>?service=${originalurl}</param-value>
{:timestamp=>"2013-06-04T10:33:33.631000-0500", :message=>"Failed parsing date from field", :field=>"syslogtimestamp", :value=>"Jun 4 10:32:48", :exception=>java.lang.IllegalArgumentException: Invalid format: "Jun 4 10:32:48" is malformed at " 4 10:32:48", :level=>:warn}
@dblessing
dblessing / date_filter
Last active December 18, 2015 02:58
Date filter, date format, and example log line.
filter {
date {
match => ['syslogtimestamp', 'MMM d HH:mm:ss.SSS', 'MMM dd HH:mm:ss.SSS']
tags => ['dns']
type => "syslog"
}
}
filter {
grok {
add_tag => ['dns']
pattern => ["%{GREEDYDATA:throw_data}%{SYSLOGTIMESTAMP:throw_syslogtimestamp} %{IP:router_ip}\/%{IP:throw_ip} %{INT:throw_int}: %{SYSLOGTIMESTAMP:syslogtimestamp} %{DATA:timezone}: %{DATA:logtype}: %{DATA:logline1} %{IP:client_ip}%{DATA:logline2} '%{DATA:address}'"]
type => "syslog"
}
}
% java -jar logstash-1.1.13-monolithic.jar agent -e 'filter { grok { pattern => ["%{GREEDYDATA:throw_data}%{SYSLOGTIMESTAMP:throw_syslogtimestamp} %{IP:router_ip}\/%{IP:throw_ip} %{INT:throw_int}: %{SYSLOGTIMESTAMP:syslogtimestamp} %{DATA:timezone}: %{DATA:logtype}: %{DATA:logline1} %{IP:client_ip}%{DATA:logline2} '%{DATA:address}'"] } date { match => [ "syslogtimestamp", "MMM d HH:mm:ss.SSS", "MMM dd HH:mm:ss.SSS"] } } output { stdout { } }'
2013-06-06T02:19:58.064Z stdin://logstash/: <190>Jun 5 16:19:13 10.123.17.145/10.123.17.145 897: Jun 5 21:19:58.064 UTC: %DNS-6-LOG_ACCESS: DNS View MobileDeviceToHQ vrf IVRF used for client 10.113.17.66/55575, querying A 'www.example.com'
input {
udp {
port => 514
type => "syslog"
}
}
filter {
grok {
add_tag => ['dns']
Event finished filtering {:event=>#<LogStash::Event:0x3a80f254 @cancelled=false, @data={"@tags"=>["dns"], "@fields"=>{"router_ip"=>["10.122.49.145"], "syslogtimestamp"=>["Jun 5 22:06:35.141"], "client_ip"=>["10.112.49.66"], "address"=>["www-elb-1183828312.us-west-1.elb.amazonaws.com"], "domain"=>["amazonaws.com"]}, "@timestamp"=>"2013-06-06T03:06:35.141Z", "@message"=>"<190>Jun 5 17:05:49 10.122.49.145/10.122.49.145 2468: Jun 5 22:06:35.141 UTC: %DNS-6-LOG_ACCESS: DNS View MobileDeviceToHQ vrf IVRF used for client 10.112.49.66/54943, querying A 'www-elb-1183828312.us-west-1.elb.amazonaws.com'\n", "@type"=>"syslog"}>, :thread=>"|worker.0", :level=>:debug, :file=>"/opt/logstash/logstash-1.1.13-monolithic.jar!/logstash/logging.rb", :line=>"35", :method=>"debug"}
Sending event {:target=><LogStash::Outputs::Stdout debug_format=>"ruby", message=>"%{@timestamp} %{@source}: %{@message}">, :level=>:debug, :file=>"/opt/logstash/logstash-1.1.13-monolithic.jar!/logstash/logging.rb", :line=>"35", :method=>"debug"}
2013