sowamazing’s gists

sowamazing / gist:93309591fb292395fcd7

Created October 28, 2014 17:30

Sending JSON Format Logs From Syslog-ng - Snippet 1

	parser p_db {

	db-parser(file("/etc/syslog-ng/ssh.xml"));

	};

	template LogglyFormat { template("<${PRI}>1 ${ISODATE} ${HOST} ${PROGRAM} ${PID} ${MSGID} [abcd1234-aaaa-bbbb-1234-1234abcd1234@41058] $MSG $(format_json --scope nv_pairs)\n");};

	destination d_loggly { tcp("logs-01.loggly.com" port(514) template(LogglyFormat)); };

sowamazing / gist:8572ca92c7e953796475

Created October 28, 2014 17:35

Sending JSON Format Logs From Syslog-ng - Snippet 2

json.usracct.username:root

sowamazing / gist:1c17b35f68784593d502

Created October 28, 2014 17:36

Sending JSON Format Logs From Syslog-ng - Snippet 3

	source s_windows {

	syslog();

	};

	template LogglyFormat { template("<${PRI}>1 ${ISODATE} ${HOST} ${PROGRAM} ${PID} ${MSGID} [abcd1234-aaaa-bbbb-1234-1234abcd1234@41058] $(format_json --scope sdata --scope selected_macros)\n");};

	destination d_loggly { tcp("logs-01.loggly.com" port(514) template(LogglyFormat)); };

sowamazing / gist:54e34cf148230362d52e

Last active August 29, 2015 14:08

Sending JSON Format Logs From Syslog-ng - Snippet 4

	source s_apache {
	file("/var/log/apache2/spike2-access.log" flags(no-parse));
	};

	parser p_apache {
	csv-parser(columns("APACHE.CLIENT_IP", "APACHE.IDENT_NAME", "APACHE.USER_NAME",
	"APACHE.TIMESTAMP", "APACHE.REQUEST_URL", "APACHE.REQUEST_STATUS",
	"APACHE.CONTENT_LENGTH", "APACHE.REFERER", "APACHE.USER_AGENT",
	"APACHE.PROCESS_TIME", "APACHE.SERVER_NAME")
	flags(escape-double-char,strip-whitespace)

sowamazing / Built-in Logging 1

Created December 1, 2014 04:35

Built-in Logging 1

	<?php
	function logData($message) {
	openlog('php', LOG_CONS \| LOG_NDELAY \| LOG_PID, LOG_USER \| LOG_PERROR);
	syslog(LOG_EMERG, $message);
	closelog();
	}
	logData(“Unable to connect to MySQL database”);

sowamazing / Built-in Logging 2

Created December 1, 2014 04:37

Built-in Logging 2

Nov 25 21:48:31 Matts-Mac-2.local php[16563]: Unable to connect to MySQL database

sowamazing / Built-in Logging 3

Created December 1, 2014 04:40

Built-in Logging 3

SeverityID, [DateTime #pid] SeverityLabel -- ProgName: message

sowamazing / Built-in Logging 4

Created December 1, 2014 04:41

Built-in Logging 4

I, [1999-03-03T02:34:24.895701 #19074] INFO -- Main: info.

sowamazing / Built-in Logging 5

Created December 1, 2014 04:42

Built-in Logging 5

	logger.formatter = proc do \|severity, datetime, progname, msg\|
	"#{datetime}: #{msg}\n"
	end

	# e.g. "2005-09-22 08:51:08 +0900: hello world"

sowamazing / Built-in Logging 6

Created December 1, 2014 04:43

Built-in Logging 6

	require 'syslog'
	require 'logger'
	def log(message, priority)
	logger = Logger.new(STDERR)
	logger.level = Logger::WARN
	logger.formatter = proc do \|severity, datetime, progname, msg\|
	"#{datetime}: #{msg}\n"
	end
	case priority
	when "debug"