Skip to content

Instantly share code, notes, and snippets.

package main
import (
"bufio"
"flag"
"fmt"
"net"
"os"
"strconv"
"strings"
@traetox
traetox / indexer_up.go
Created March 24, 2021 20:42
Simple application to test the status of a Gravwell indexer.
// TO BUILD execute the following:
// go mod init indexerstatus
// CGO_ENABLED=0 go build
package main
import (
"flag"
"log"
"github.com/gravwell/gravwell/v3/ingest"
@traetox
traetox / file_follow.conf
Created November 13, 2020 20:12
Zeek File Follower Config
[Global]
Connection-Timeout = 0
State-Store-Location=/opt/gravwell/etc/file_follow.state
Log-Level=WARN #options are OFF INFO WARN ERROR
Log-File=/opt/gravwell/log/file_follow.log
# Maximum number of files to watch before rotating out old ones, this can be bumped but will need sysctl flags adjusted
Max-Files-Watched=128
[Follower "barnyard2"]
Timestamp-Format-Override="UnixMilli"
@traetox
traetox / go
Created November 4, 2020 15:56
Kegerator Gravwell Ingester
package main
import (
"log"
"encoding/binary"
"net"
"time"
"github.com/gravwell/gravwell/v3/ingest"
"github.com/gravwell/gravwell/v3/ingest/entry"
@traetox
traetox / tarmerge.go
Created March 13, 2020 20:14
Simple golang program to merge multiple tar files into a single tar file using parallel compression
package main
import (
"archive/tar"
"flag"
"fmt"
"io"
"log"
"net/http"
"os"
@traetox
traetox / gist:ea9d7c62d7a4e70416796bda0289b709
Created November 1, 2018 02:12
named field generator usage
package main
import (
"github.com/gravwell/tools/nfgen"
"log"
)
func main() {
//create a new named fields resource using the CSV engine that knows how to deal with 2
//data types, one for login events and one for password failed events
@traetox
traetox / main.go
Created October 23, 2018 16:40
generate brutally incoherent timestamped line data
package main
import (
"fmt"
"flag"
"math/rand"
"time"
"log"
"os"
)

Keybase proof

I hereby claim:

  • I am traetox on github.
  • I am traetox (https://keybase.io/traetox) on keybase.
  • I have a public key ASBYZc9PQJeayQMrMnw8EODmEFAAyjwsOQjIORpaA9ZLlAo

To claim this, I am signing this object:

package main
import (
"flag"
"fmt"
"log"
"math/rand"
"os"
"path/filepath"
"sync"