JSON logging, to Splunk

[Patrick Proniewski]

On 5 oct. 2014, at 23:07, Mark Martinec <Mark.Martinec+amavis at ijs.si> wrote:

> 2014-10-05 20:17, Jernej Porenta wrote:
>> a while ago, Mark Martinec wrote a script that pulls Redis logs out to
>> standard output, which can be easily fed into splunk.
>> With a little help of a skilled perl programmer, I am totally sure you
>> can extend attached script to do whatever you want ;)
> 
> Indeed, my little program offers all that: locking and queuing is
> handled by Redis, so the consumer process (e.g. Splunk) would be
> nicely decoupled from amavisd. Even better would be to persuade
> Splunk folks to provide an input module to pull JSON records from
> a Redis queue directly.


It looks very promising! I'll test ASAP and keep you posted. Thank you.

Patrick PRONIEWSKI
-- 
Responsable pôle Opérations - DSI - Université Lumière Lyon 2
Responsable Sécurité des Systèmes d'Information