https://github.com/tes3awy/device-lps
Used to estimate logging rate based on log receiver statistics.
https://github.com/tes3awy/device-lps
estimation-algorithm expect paloaltonetworks python3
Last synced: 8 months ago
JSON representation
Used to estimate logging rate based on log receiver statistics.
- Host: GitHub
- URL: https://github.com/tes3awy/device-lps
- Owner: Tes3awy
- Created: 2022-09-30T11:58:20.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2022-10-01T21:30:17.000Z (about 3 years ago)
- Last Synced: 2025-01-11T08:51:43.919Z (9 months ago)
- Topics: estimation-algorithm, expect, paloaltonetworks, python3
- Language: Python
- Homepage:
- Size: 4.88 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Device LPS
> Used to estimate logging rate based on log receiver statistics.
This set of scripts will poll the firewall to see how many logs are written per second. It pulls the LPS value from the `debug log-receiver statistics` for PaloAlto Firewall or `debug log-collector log-collection-stats show incoming-logs` for PaltoAlto Panorama, and is intended to provide an _estimate_ of the number of logs per second that can be forwarded from the device.
> **Note that the number will be accurate provided all policies are configured to forward logs.**
## Table of Contents
1. [Installation](#installation)
2. [Usage](#usage)
3. [Credits](#credits)
4. [TODO](#todo)
## Installation
```bash
sudo apt update && sudo apt upgrade -y
sudo apt install expect -y
```
## Usage
```bash
./device_lps.exp
```
- `` can be either `fw` or `cms`. `fw` will send the appropriate command for a firewall while `cms` will send the appropriate command for Panorama.
- Samples are taken every 10 seconds, so you would enter 360 to get samples over an hour.
## Credits
This is an updated version of the work of art created by `cstancill(at)paloaltonetworks(dot)com` in [**Panorama Sizing and Design Guide**](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clc8CAC)
## TODO
- [ ] Replace `expect` script with a Python (Paramiko) script.