reyjrar

PLAY [localhost] ***************************************************************************************************************************

TASK [Gathering Facts] *********************************************************************************************************************
ok: [localhost]

TASK [Running for first] *******************************************************************************************************************

TASK [bar : debug] *************************************************************************************************************************
ok: [localhost] => {
    "msg": "var_bar is second"

reyjrar

---
- name: "Set a global variable mid-playbook run"
  run_once: true
  set_fact:
    "{{ global_name }}": "{{ global_value }}"
  delegate_to: "{{ _all__hostname }}"
  loop: "{{ groups['all'] }}"
  loop_control:
    loop_var: "_all__hostname"
  

reyjrar

#!/bin/bash

# Install perlbrew
curl -L https://install.perlbrew.pl | bash

# Setup perlbrew
perlbrew install -j8 -n 5.30.0
perlbrew switch 5.30.0
perlbrew install-cpanm

reyjrar

---
host: localhost
port: 9200
base: syslog
days: 1
meta:
  access:
    timestamp: timestamp
  ossec:
    timestamp: ts

reyjrar

---
host: localhost
port: 9200
base: syslog
days: 1
timestamp: '@timestamp'

reyjrar

brad@janus $ es-search.pl --top program error
= Querying Indexes: syslog-2016.11.20
count   program
487     sshd
33      postfix/smtpd
24      postfix/smtps/smtpd
1       freshclam
# Search Parameters:
#    {"bool":{"must":[{"query_string":{"query":"error"}}]}}
# Displaying 4 of 545 in 0 seconds.

reyjrar

input {
  udp {
    host => "127.0.0.1"
    port => 9514
    type => "syslog"
  }
}
filter {
  # This grok FAILS with a PARSE ERROR
  grok {

reyjrar

# puppet module install zleslie-unbound
class dns::caching {
    # I'm using extlookup for a very small personal network, could be hiera
    $trusted_ipv4 = extlookup('trusted_ipv4')
    $trusted_ipv6 = extlookup('trusted_ipv6')

    realize(Group['unbound'])
    realize(User['unbound'])

    $local_ad_servers = "/etc/unbound/local.d/adservers.conf"

reyjrar

Keybase proof

I hereby claim:

• I am reyjrar on github.
• I am reyjrar (https://keybase.io/reyjrar) on keybase.
• I have a public key ASBhL2F7FpCetTBbHeSajnZusy0pe2QJNTX69go64Lwm_wo

To claim this, I am signing this object:

reyjrar

==================================================
Changes from 2014-02-27 00:00:00 +0000 to present.
==================================================

----------------------------------------
version 4.4 at 2016-02-27 07:15:06 +0000
----------------------------------------

  Change: 4a832f92659ebc575d2de0948dbb01b8e349138b
  Author: Brad Lhotsky <blhotsky@craigslist.org>