instrument-everything-blog-listen-for-incoming-logs

listen-for-incoming-logs.py

def run_syslog_server(logs_path):
    client = docker.from_env()
    volumes = ['{}:/var/log'.format(logs_path)]
    container_handle = client.containers.run(image='balabit/syslog-ng:latest', command='--no-caps', stdout=True,
                                             stderr=True, remove=True, detach=True, volumes=volumes,
                                             name='instrumentation-syslog-ng')
    return container_handle

def run_ngrok(auth_token, remote_addr):
    client = docker.from_env()
    syslog_name = 'instrumentation-syslog-ng'
    command = 'ngrok tcp --authtoken {} --remote-addr {}:{} {}:514'.format(auth_token, remote_addr[0], remote_addr[1],
                                                                           syslog_name)
    links = {syslog_name: syslog_name}
    container_handle = client.containers.run(image='wernight/ngrok:latest', command=command, stdout=True,
                                             stderr=True, remove=True, detach=True, links=links,
                                             name='instrumentation-ngrok')
    return container_handle