hugespoon

Keybase proof

I hereby claim:

• I am hugespoon on github.
• I am hugespoon (https://keybase.io/hugespoon) on keybase.
• I have a public key whose fingerprint is 787C 6CFF 06D6 E23A EAB1 97AE 082F E60F F9AF 75CE

To claim this, I am signing this object:

hugespoon

#
# Cookbook Name:: sensu
# Recipe:: _linux
#
# Copyright 2012, Sonian Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#

hugespoon

# ovs-vsctl show
0ba8905d-1951-4957-aec1-fe3259eadfc1
    Bridge br-ex
        Port br-ex
            Interface br-ex
                type: internal
    Bridge br-int
        Port br-int
            Interface br-int
                type: internal

hugespoon

2013-06-27 10:15:44     INFO [quantum.agent.dhcp_agent] Synchronizing state
2013-06-27 10:15:45    ERROR [quantum.agent.dhcp_agent] Unable to enable dhcp.
Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/quantum/agent/dhcp_agent.py", line 131, in call_driver
    getattr(driver, action)()
  File "/usr/lib/python2.6/site-packages/quantum/agent/linux/dhcp.py", line 124, in enable
    reuse_existing=True)
  File "/usr/lib/python2.6/site-packages/quantum/agent/dhcp_agent.py", line 554, in setup
    namespace=namespace)
  File "/usr/lib/python2.6/site-packages/quantum/agent/linux/interface.py", line 190, in plug

hugespoon

<node name="HOSTNAME" 
      type="Node" 
      description="HOSTNAME"
      osArch="x86_64"
      osFamily="unix"
      osName="centos"
      osVersion="6.4"
      tags="_default,percona_server"
      username="${job.username}"
      hostname="HOSTNAME"

hugespoon

case node['platform_family']
  when "rhel"
    if node['platform_version'].to_i >= 6 then
      puts node['platform_version']
    end
end

hugespoon

input {
  redis {
    host => "127.0.0.1"
    type => "redis-input"
    # these settings should match the output of the agent
    data_type => "list"
    key => "logstash"

    # We use json_event here since the sender is a logstash agent
    format => "json_event"

hugespoon

grok {
    type => "syslog"
    pattern => [ "%{SYSLOGBASE} Failed password for %{USERNAME:user} from %{IPORHOST:host} port %{POSINT:port} %{WORD:protocol}" ]
    add_tags => [ "ssh", "grokked", "auth_failure" ]
  }

ERROR

{:timestamp=>"2013-05-01T09:17:07.306000-0500", :message=>"Invalid setting for grok filter plugin:\n\n  filter {\n    grok {\n      # This setting must be a string\n      # Expected string, got [\"ssh\", \"grokked\", \"auth_failure\"]\n      add_tags => [\"ssh\", \"grokked\", \"auth_failure\"]\n      ...\n    }\n  }", :level=>:error}

hugespoon

filters {

# basic syslog filters here

metrics {
	type => "generated"
	meter => "%{source_host}"
	add_tag => "metric"
  }

hugespoon

# yum install logstash-1.1.11.dev-1_centos.noarch.rpm 
Loaded plugins: fastestmirror, security
Loading mirror speeds from cached hostfile
 * base: mirror.steadfast.net
 * extras: mirror.wiredtree.com
 * updates: mirror.wiredtree.com
base                                                                                                                                                                                                                   | 3.7 kB     00:00     
extras                                                                                                                                                                                                                 | 3.5 kB     00:00     
updates                                                                                                                                                                                                                | 3.5 kB     00:00     
updates/primary_db