/ 
eris-0.008
River stage zero No dependents

Changes for version 0.008

  • Change: e7f412e96ee3200c846a633bf0a004491b327993 Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-20 06:40:35 +0000
    • Fix the data types of a few elements
  • Change: 966698d60a7eebb562777530975cc8c816186314 Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-20 06:34:32 +0000
    • Don't track log files in git
  • Change: 67f1ed5cb9f21dc7cab7188e0d3b2db92ab03301 Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-19 06:50:40 +0000
    • Fix message field in the syslog dictionary
  • Change: c8c1462d45cdac2c9034e848e37e81e9e42b0473 Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-19 06:46:49 +0000
    • Parse::Syslog::Line fixed postfix style tag parsing
  • Change: abcc4c9e30f6222baea651cc2e889d4ee690289c Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-19 06:42:15 +0000
    • Adding capacity to specify meta-data with fields
    • This data will be used to construct an ElasticSearch mapping for the indices.
  • Change: 4c5b61f91baaa5621b393f214a01ce8461f93530 Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-19 05:42:45 +0000
    • Packaging fixes to make a Docker thing possible
  • Change: a567725859f3f2413540f21bd1fc675fe0dc770e Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-06-19 05:42:45 +0000
    • Version release preparation
  • Change: c6615f11d9e8205e9bf5a1ff8a10221c2e2feda3 Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2019-05-20 17:16:23 +0000
    • Fix missing POE parameter offsets
  • Change: e265aa5dd1f4c82f7d64efb8c5bd74e0341a039b Author: Brad Lhotsky <brad@divisionbyzero.net> Date : 2018-09-11 09:29:44 +0000
    • Fix typo in error message

Documentation

eris-context.pl
Utility for testing the logging contextualizer
eris-eris-client.pl
Simple wrapper to spawn workers for handling syslog stream
eris-es-indexer.pl
Sample implementation using the eris toolkit to index data to elasticsearch
eris-field-lookup.pl
Utility for testing the logging contextualizer
eris-stdin-listener.pl
Simple wrapper to spawn workers for handling syslog stream

Modules

eris
Eris is the Greek Goddess of Chaos
eris::dictionary
Field dictionary loader
eris::dictionary::cee
Contains fields in the Common Event Expression syntax
eris::dictionary::eris
Contains fields eris adds to events
eris::dictionary::eris::debug
Debugging data in the event
eris::dictionary::syslog
Contains fields extracted from syslog messages
eris::log
Structured log or event object implementation
eris::log::context::GeoIP
Apply MaxMind GeoIP Data to events
eris::log::context::attacks::url
Inspects URL's for common attack patterns
eris::log::context::crond
Parse crond messages to structured data
eris::log::context::dhcpd
Parses dhcpd messages into structured data.
eris::log::context::iptables
Parses iptables messages into structured data.
eris::log::context::pfSense::filterlog
Parse the pfSense filterlog
eris::log::context::postfix
Parses postfix messages into structured data
eris::log::context::snort
Parses the Snort and Suricata alert logs
eris::log::context::sshd
Parse sshd logs into structured data
eris::log::context::static
Add static keys/values to every message
eris::log::context::sudo
Parses the sudo key=value pairs into structured documents
eris::log::context::yum
Parse the yum syslog output into structured data
eris::log::contexts
Discovery and access for context objects
eris::log::contextualizer
Primary interface to the eris log parsing library
eris::log::decoder::json
Decodes any detected JSON in a log line from then opening curly brace
eris::log::decoder::syslog
Parse the syslog headers using Parse::Syslog::Line
eris::log::decoders
Discovery and access for decoders
eris::role::context
Role for implementing a log context
eris::role::decoder
Role for implementing decoders
eris::role::dictionary
Interface for implementing a dictionary object
eris::role::dictionary::hash
Simple dictionary implementation based off a hash
eris::role::pluggable
Implements the plumbing for an object to support plugins
eris::role::plugin
Common interface for implementing an eris plugin
eris::role::schema
Role for implementing a schema
eris::schema::syslog
Schema for the syslog data
eris::schemas
Discovery and access for schemas

Examples

Other files