lennartkoopmann

Keybase proof

I hereby claim:

• I am lennartkoopmann on github.
• I am lennartkoopmann (https://keybase.io/lennartkoopmann) on keybase.
• I have a public key whose fingerprint is 8B0F E307 8647 AD50 1081 EC37 AEEA 55EE 8A48 D868

To claim this, I am signing this object:

lennartkoopmann

packetbeat.interfaces.device: any
packetbeat.protocols.dns:
  ports: [53]
  include_authorities: true
  include_additionals: true
name: tap
output.logstash:
  hosts: ["graylog.example.org:12200"]

lennartkoopmann

[lennart@sundaysister ~ ]$ tar -cf test.tar Downloads/
load: 2.21  cmd: bsdtar 21161 running 0.00u 0.35s
In: 80 files, 62984192 bytes; Out: 62976000 bytes, compression 0%
Current: Downloads/DockerToolbox-1.11.0.pkg (48627712/188520546 bytes)

lennartkoopmann

PUTVAL "temperatures/case_internal" interval=60 N:100.4

---

temperatures case_internal:GAUGE:U:U

lennartkoopmann

Time: 07/17-15:44:51.136436 
event_ref: 0
192.168.1.4 -> 192.168.1.24 (portscan) TCP Portscan
Priority Count: 9
Connection Count: 10
IP Count: 1
Scanner IP Range: 192.168.1.4:192.168.1.4
Port/Proto Count: 10
Port/Proto Range: 23:8888

lennartkoopmann

2014-01-11 17:40:14,349 DEBUG: org.graylog2.periodical.AlertScannerThread - Running alert checks.
2014-01-11 17:40:14,350 DEBUG: org.graylog2.periodical.AlertScannerThread - There are 1 streams with configured alert conditions.
2014-01-11 17:40:14,350 DEBUG: org.graylog2.periodical.AlertScannerThread - Stream [52d153f3300497641fae85c3: "Alerts test"] has [1] configured alert conditions.
2014-01-11 17:40:14,350 DEBUG: org.graylog2.alerts.AlertCondition - Checking alert condition [892e7056-7640-46c5-8def-8a7a5efdd59e:MESSAGE_COUNT={time: 1, threshold_type: more, threshold: 10, grace: 2}, stream:={52d153f3300497641fae85c3: "Alerts test"}]
2014-01-11 17:40:14,353 DEBUG: org.graylog2.alerts.types.MessageCountAlertCondition - Alert check <892e7056-7640-46c5-8def-8a7a5efdd59e> result: [20]
2014-01-11 17:40:14,353 INFO : org.graylog2.periodical.AlertScannerThread - Alert condition [892e7056-7640-46c5-8def-8a7a5efdd59e:MESSAGE_COUNT={time: 1, threshold_type: more, threshold: 10, grace: 2}, stream:={52d153f3300497641fa

lennartkoopmann

@RequiresAuthentication
@Api(value = "Streams", description = "Manage streams")
@Path("/streams")
public class StreamResource extends RestResource {
    
    ...

    @PUT @Timed
    @Path("/{streamId}")
    @ApiOperation(value = "Update a stream")

lennartkoopmann

graylog2-server(020)$ git diff `git log --since="1 year ago" --reverse --pretty=oneline | head -1 | awk '{print $1}'` --shortstat

lennartkoopmann

function colorizeRuleResults(rules, list) {
    /*var ruleslist = $("li", list);
    for (var i=0; i < ruleslist.size(); i++) {
        var rule = ruleslist[i];
        var streamruleId = rule.getAttribute("data-streamrule-id");
        if (streamruleId == undefined) continue;
        var match = rules[streamruleId];
        if (match != undefined) {
            if (match) {
                rule.classList.add("alert-success");

lennartkoopmann

2013-12-09 18:54:46,822 INFO : org.graylog2.periodical.DeflectorManagerThread - Number of messages in <graylog2_108> (200034) is higher than the limit (200000). Pointing deflector to new index now!
2013-12-09 18:54:46,822 INFO : org.graylog2.indexer.Deflector - Cycling deflector to next index now.
2013-12-09 18:54:46,844 INFO : org.graylog2.indexer.Deflector - Cycling from <graylog2_108> to <graylog2_109>
2013-12-09 18:54:46,844 INFO : org.graylog2.indexer.Deflector - Creating index target <graylog2_109>...
2013-12-09 18:54:47,380 INFO : org.graylog2.indexer.Deflector - Done!
2013-12-09 18:54:47,380 INFO : org.graylog2.indexer.Deflector - Pointing deflector to new target index....
2013-12-09 18:54:47,542 INFO : org.graylog2.indexer.Deflector - Flushing old index <graylog2_108>.
2013-12-09 18:54:47,669 INFO : org.graylog2.indexer.Deflector - Setting old index <graylog2_108> to read-only.
2013-12-09 18:54:47,826 INFO : org.graylog2.system.jobs.SystemJobManager - Submitted SystemJob <fe729720-60fa-11e3-a697-4c8d