https://github.com/rabbitstack/cubostratus

Blazingly fast Linux syscall collector
https://github.com/rabbitstack/cubostratus

cgroups containers instrumentation linux-kernel rust syscalls

Last synced: about 2 months ago
JSON representation

Blazingly fast Linux syscall collector

• Host: GitHub
• URL: https://github.com/rabbitstack/cubostratus
• Owner: rabbitstack
• License: apache-2.0
• Created: 2017-03-25T18:43:07.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2018-03-10T19:50:12.000Z (almost 7 years ago)
• Last Synced: 2024-10-15T23:54:46.536Z (about 2 months ago)
• Topics: cgroups, containers, instrumentation, linux-kernel, rust, syscalls
• Language: Rust
• Size: 42 KB
• Stars: 74
• Watchers: 4
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-blazingly-fast - cubostratus - Blazingly fast Linux syscall collector (Rust)

README

        


  



**cubostratus** is a high performance Linux syscall collector. It acquires the syscall flow from the rock solid [sysdig](https://github.com/draios/sysdig) driver and emits it to Kafka brokers for later ingestion, storage and analysis.

# Usage

1. Build the sysdig kernel module or [install](http://www.sysdig.org/install/) sysdig

2. Install Rust

```bash

curl -f -L https://static.rust-lang.org/rustup.sh -O

sh rustup.sh

```

3. Clone this repository and build `cubostratusc` 

```bash

git clone https://github.com/rabbitstack/cubostratusc.git

cd cubostratusc

cargo build

````

4. Modify `cubostratusc.toml` configuration descriptor

```bash

export CUBOSTRATUSC_CONFIG=cubostratusc.toml # or

sudo cp cubostratusc.toml /etc

```

5. Create a `Kafka` topic and start `cubostratusc`:

```bash

bin/kafka-topics.sh --create --zookeeper localhost:2181 --replication-factor 1 \

                    --partitions 1 --topic cubostratus

sudo ./target/debug/cubostratusc

```