GaryRogers

ELASTICSEARCHTIME \[%{TIMESTAMP_ISO8601:timestamp}\]
ELASTICSEARCHLEVEL \[%{LOGLEVEL:level}\s+\]
ELASTICSEARCHSERVICE \[%{DATA:service}\s+\]
ELASTICSEARCHVERSION \[%{DATA:version}\]
ELASTICSEARCHLOG %{ELASTICSEARCHTIME}%{ELASTICSEARCHLEVEL}%{ELASTICSEARCHSERVICE} %{ELASTICSEARCHVERSION} %{GREEDYDATA:mymessage}

GaryRogers

MONOLOGTIME \[%{TIMESTAMP_ISO8601:timestamp}\]
MONOLOGLEVEL \[%{LOGLEVEL:level}\]
MONOLOGCONTEXT \[context:%{DATA:context}\]
MONOLOGEXTRA \[extra:%{DATA:extra}\]
MONOLOG %{MONOLOGTIME} %{MONOLOGLEVEL} %{MONOLOGCONTEXT}

GaryRogers

<project name="myproject" default="build" basedir=".">
    <property name="build" value="${basedir}/build"/>
    <property name="build.src" value="${build}/src"/>

    <target name="clean">
        <delete dir="${build}" />
    </target>

    <target name="init">
        <mkdir dir="${build}" />

GaryRogers

CREATE TABLE
    MONOLOG
    (
        ID NUMBER(11) NOT NULL,
        LOG_TIME TIMESTAMP(6),
        LOG_LEVEL VARCHAR2(20),
        LOG_HOSTNAME VARCHAR2(512),
        LOG_USER VARCHAR2(30),
        LOG_IP VARCHAR2(45),
        LOG_MESSAGE CLOB,

GaryRogers

<?php

namespace Monolog\Handler;

use Monolog\Logger;
use Monolog\Formatter\LineFormatter;

// https://github.com/Seldaek/monolog/blob/master/doc/extending.md

class OracleHandler extends AbstractProcessingHandler {

GaryRogers

#!/usr/bin/env bash

if [ $(yum repolist | grep -c ^epel) -eq 0 ]; then
  printf "[bootstrap] Adding EPEL Repo\n";
  yum --quiet -y install http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
fi

# ===================================================================
# Install python if it doesn't exist.
# ===================================================================

GaryRogers

# Docker file to create a CentOS StatsD host.
# This uses Elasticsearch as a backend rather than Graphite/Carbon.
# Depends on having an Elasticsearch container.
FROM centos:centos6
MAINTAINER Gary Rogers <gary-rogers@uiowa.edu>

# Install things as root
USER root

RUN \

GaryRogers

# ==[ printSlack ]=============================================================
# Function to send output from the commandline to Slack.
# (wants SLACK_TOKEN to be defined in .bashrc or other ENV method, or you can set it here.)
#
# @parameter string $LEVEL   INFO/ERROR/WARNING message. Changes emoji
# @parameter string $MESSAGE Message to send to slack.
printSlack()
{
  SLACK_HOSTNAME=${SLACK_HOSTNAME-'mycompany.slack.com'};
  SLACK_TOKEN=${SLACK_TOKEN-'oops'};

GaryRogers

Remove Syslog line headers from multi-line logs in logstash

Overview

Rather than run a log shipper on hosts, we use Syslog when shipping logs out of monolog. This works great for single-line logs. It breaks when a log message gets split up by syslog. When syslog does this, it duplicates the line header, like so:

2015-06-09T05:39:31.457042-05:00 host.example.edu : This is a really really really
2015-06-09T05:39:31.475414-05:00 host.example.edu : really long message

GaryRogers

Quick intro to Javascript Modules

If you're looking for something in depth, I suggest http://www.adequatelygood.com/JavaScript-Module-Pattern-In-Depth.html

var SomeMarionetteApp = (function(my, $, _, backbone, Marionette, bootstrap, common) {
    my.App = Marionette.Application.extend({
        initialize: function(options){
            var self = this;