https://github.com/techjacker/systemdlogger

Exports systemd logs to an external service, eg cloudwatch, elasticsearch
https://github.com/techjacker/systemdlogger

aws cloudwatch elasticsearch kibana logging logs systemd

Last synced: about 2 months ago
JSON representation

Exports systemd logs to an external service, eg cloudwatch, elasticsearch

Host: GitHub
URL: https://github.com/techjacker/systemdlogger
Owner: techjacker
License: mit
Created: 2017-01-03T15:42:09.000Z (over 8 years ago)
Default Branch: master
Last Pushed: 2021-06-01T21:44:14.000Z (almost 4 years ago)
Last Synced: 2025-03-18T19:52:43.034Z (about 2 months ago)
Topics: aws, cloudwatch, elasticsearch, kibana, logging, logs, systemd
Language: Python
Homepage:
Size: 88.9 KB
Stars: 90
Watchers: 2
Forks: 3
Open Issues: 3
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

README

[![Build Status](https://travis-ci.org/techjacker/systemdlogger.svg?branch=master)](https://travis-ci.org/techjacker/systemdlogger)

# systemdlogger

- Lightweight, python only, logstash alternative
- Exports systemd journald logs to an external service, eg cloudwatch, elasticsearch
- Use with a cron job
- Python 3.4+

-----------------------------------------------------------
## Installation

#### Install Dependencies
[python-systemd](https://github.com/systemd/python-systemd)
```
# Fedora/RHEL/CentOS
$ dnf install python-systemd python3-systemd
```
OR
```
# Debian/Ubuntu/Mint
$ apt-get install python-systemd python3-systemd
```

#### Install from pip
```$ pip install systemdlogger```

-----------------------------------------------------------
## Usage

```Shell
$ systemdlogger -h
usage: systemdlogger [-h] config

Exports systemd logs to different storage backends, eg
cloudwatch/elasticsearch.

positional arguments:
config path to config file

optional arguments:
-h, --help show this help message and exit
```

#### Example usage

See example config files below.

```$ systemdlogger config.json```

#### Recommended Usage - Cron Job Runing Every Minute

```*/1 * * * * . /etc/webserver.env; export ENV=$NODE_ENV; /usr/local/bin/systemdlogger /path/to/config.json >/etc/logs/systemdlogger.log 2>&1```

-----------------------------------------------------------
## Config

[Full example config](tests/fixtures/config.json) that includes extra optional properties.

#### Example Cloudwatch Config - just required properties

```JavaScript
{
"systemd": {
"unit": "webserver"
},
"backends": {
"cloudwatch": {
"log_group_name": "log_group_name",
"log_stream_name": "log_stream_name"
}
}
}
```

#### Example Elasticsearch Config - just required properties

If the elasticsearch endpoint does not use port `9200` you need to explicitly state it as shown below:

```JavaScript
{
"systemd": {
"unit": "webserver"
},
"backends": {
"elasticsearch": {
"doctype": "webserver",
"hosts": ["search-applogs-blahiy7jyhmqwerfnrfg9trdz4.eu-west-1.es.amazonaws.com:80"]
}
}
}
```

#### Environment Variable Interpolation

Environment variables will be interpolated when the config is loaded.

```$ ENV=uat FOO=bar systemdlogger config.json```

```JavaScript
// config.json
{
"systemd": {
"unit": "webserver"
},
"backends": {
"cloudwatch": {
"log_group_name": "$ENV-myapp",
"log_stream_name": "$FOO-myservice"
}
}
}
```

Is loaded as:

```JavaScript
...
"cloudwatch": {
"log_group_name": "uat-myapp",
"log_stream_name": "bar-myservice"
}
```

-----------------------------------------------------------
## Cloudwatch Backend

Appends EC2 instance id to logstream name, eg:

```
Log Groups > webapp-uat > webapp-i-06e2a5d847e0d532f
```

-----------------------------------------------------------
## Elasticseach Backend

Creates daily indexes for logs in `logs-YYYY-MM-DD` format, eg:
```
logs-16-08-25
logs-16-08-26
```

### Kibana Setup

Configure Kibana index pattern:

- Go to Kibana index settings URL eg, `http:///_plugin/kibana/#/settings/indices/?_g=()`
- Select both checkboxes.
- Set `Index pattern interval` to `Daily`
- Enter `[logs-]YYYY-MM-DD` for the index name
- Select `timestamp` for the timestamp field
- Click on `Create`

![Kibana Index Setup](docs/kibana_index_setup.png?raw=true "Kibana Index Setup")

-----------------------------------------------------------
## Development Setup

```
$ make setup
$ source env/bin/activate
$ make deps
```

-----------------------------------------------------------

## Unit Tests

#### Install dependencies
```$ pip install -r requirements.txt```

#### Run Tests
```$ make test```

-----------------------------------------------------------

## Integration Tests

Run against elasticsearch docker container.

```
$ docker-compose up -d
$ make test-integration
```

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

https://github.com/techjacker/systemdlogger

Awesome Lists containing this project

README