Skip to content

Instantly share code, notes, and snippets.

View gist:52123e7e8234e58b02c369b3d251f1c8
package main
import (
"bufio"
"flag"
"fmt"
"net"
"os"
"strconv"
"strings"
@traetox
traetox / indexer_up.go
Created Mar 24, 2021
Simple application to test the status of a Gravwell indexer.
View indexer_up.go
// TO BUILD execute the following:
// go mod init indexerstatus
// CGO_ENABLED=0 go build
package main
import (
"flag"
"log"
"github.com/gravwell/gravwell/v3/ingest"
@traetox
traetox / file_follow.conf
Created Nov 13, 2020
Zeek File Follower Config
View file_follow.conf
[Global]
Connection-Timeout = 0
State-Store-Location=/opt/gravwell/etc/file_follow.state
Log-Level=WARN #options are OFF INFO WARN ERROR
Log-File=/opt/gravwell/log/file_follow.log
# Maximum number of files to watch before rotating out old ones, this can be bumped but will need sysctl flags adjusted
Max-Files-Watched=128
[Follower "barnyard2"]
Timestamp-Format-Override="UnixMilli"
@traetox
traetox / go
Created Nov 4, 2020
Kegerator Gravwell Ingester
View go
package main
import (
"log"
"encoding/binary"
"net"
"time"
"github.com/gravwell/gravwell/v3/ingest"
"github.com/gravwell/gravwell/v3/ingest/entry"
@traetox
traetox / tarmerge.go
Created Mar 13, 2020
Simple golang program to merge multiple tar files into a single tar file using parallel compression
View tarmerge.go
package main
import (
"archive/tar"
"flag"
"fmt"
"io"
"log"
"net/http"
"os"
View gist:ea9d7c62d7a4e70416796bda0289b709
package main
import (
"github.com/gravwell/tools/nfgen"
"log"
)
func main() {
//create a new named fields resource using the CSV engine that knows how to deal with 2
//data types, one for login events and one for password failed events
@traetox
traetox / main.go
Created Oct 23, 2018
generate brutally incoherent timestamped line data
View main.go
package main
import (
"fmt"
"flag"
"math/rand"
"time"
"log"
"os"
)
View keybase.md

Keybase proof

I hereby claim:

  • I am traetox on github.
  • I am traetox (https://keybase.io/traetox) on keybase.
  • I have a public key ASBYZc9PQJeayQMrMnw8EODmEFAAyjwsOQjIORpaA9ZLlAo

To claim this, I am signing this object:

View randread.go
package main
import (
"flag"
"fmt"
"log"
"math/rand"
"os"
"path/filepath"
"sync"