Is this plugin supported yet?
https://www.elastic.co/blog/introducing ... ttp-plugin
Has anyone tested this work over ssl?
I'm in fact thinking of a way to send data to my nls different then using this function I've been using over the year in Powershell:
Code: Select all
function Write-Log {
[CmdletBinding()]
param (
[parameter(Mandatory=$true)][string]$Log,
[parameter(Mandatory=$true)][ValidateSet('Debug', 'Info', 'Warning', 'Error')][string]$Severity,
[parameter(Mandatory=$true)][string]$Message
)
$Now = Get-Date -Format 'yyyy-MM-dd HH:mm:ss,fff'
$LocalScriptName = split-path $MyInvocation.PSCommandPath -Leaf
if ($Log -eq 'Undefined') {
Write-Debug "${Now}: ${LocalScriptName}: Info: LogServer is undefined."
}
elseif ($Log -eq 'Verbose') {
Write-Verbose "${Now}: ${LocalScriptName}: ${Severity}: $Message"
}
elseif ($Log -eq 'Debug') {
Write-Debug "${Now}: ${LocalScriptName}: ${Severity}: $Message"
}
elseif ($Log -eq 'Output') {
Write-Host "${Now}: ${LocalScriptName}: ${Severity}: $Message"
}
elseif ($Log -match '^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\-]*[A-Za-z0-9])(?::(?<port>\d+))$' -or $Log -match "^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$") {
$IpOrHost = $log.Split(':')[0]
$Port = $log.Split(':')[1]
if ($IpOrHost -match '^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])$') {
$Ip = $IpOrHost
}
else {
$Ip = ([System.Net.Dns]::GetHostAddresses($IpOrHost)).IPAddressToString
}
Try {
$LocalHostname = ([System.Net.Dns]::GetHostByName((hostname.exe)).HostName).tolower()
$JsonObject = (New-Object PSObject |
Add-Member -PassThru NoteProperty logsource $LocalHostname |
Add-Member -PassThru NoteProperty hostname $LocalHostname |
Add-Member -PassThru NoteProperty scriptname $LocalScriptName |
Add-Member -PassThru NoteProperty logtime $Now |
Add-Member -PassThru NoteProperty severity_label $Severity |
Add-Member -PassThru NoteProperty message $Message ) |
ConvertTo-Json
$JsonString = $JsonObject -replace "`n",' ' -replace "`r",' '
$Socket = New-Object System.Net.Sockets.TCPClient($Ip,$Port)
$Stream = $Socket.GetStream()
$Writer = New-Object System.IO.StreamWriter($Stream)
$Writer.WriteLine($JsonString)
$Writer.Flush()
$Stream.Close()
$Socket.Close()
}
catch {
Write-Host "${Now}: ${LocalScriptName}: Error: Something went wrong while trying to send message to Logstash server `"$Log`"."
}
Write-Verbose "${Now}: ${LocalScriptName}: ${Severity}: Ip: $Ip Port: $Port JsonString: $JsonString"
}
elseif ($Log -match '^((([a-zA-Z]:)|(\\{2}\w+)|(\\{2}(?:(?:25[0-5]|2[0-4]\d|[01]\d\d|\d?\d)(?(?=\.?\d)\.)){4}))(\\(\w[\w ]*))*)') {
if (Test-Path -Path $Log -pathType container){
Write-Host "${Now}: ${LocalScriptName}: Error: Passed Path is a directory. Please provide a file."
exit 1
}
elseif (!(Test-Path -Path $Log)) {
try {
New-Item -Path $Log -Type file -Force | Out-null
}
catch {
$Now = Get-Date -Format 'yyyy-MM-dd HH:mm:ss,fff'
Write-Host "${Now}: ${LocalScriptName}: Error: Write-Log was unable to find or create the path `"$Log`". Please debug.."
exit 1
}
}
try {
"${Now}: ${LocalScriptName}: ${Severity}: $Message" | Out-File -filepath $Log -Append
}
catch {
Write-Host "${Now}: ${LocalScriptName}: Error: Something went wrong while writing to file `"$Log`". It might be locked."
}
}
}Code: Select all
tcp {
port => 7777
type => "nxlogs"
ssl_cacert => "/etc/pki/tls/certs/rootCA.pem"
Page 1
Copyright © 2010-2014 Nagios Enterprises, LLC
Revision 1.0 – February, 2016
Nagios Log Server – Sending nxlogs with SSL
Nagios Enterprises, LLC US: 1-888-NAGIOS-1 Web: www.nagios.com
P.O. Box 8154
Saint Paul, MN 55108
USA
Int'l: +1 651-204-9102 Email: [email protected]
Fax: +1 651-204-9103
ssl_cert => "/etc/pki/tls/certs/device-nls.crt"
ssl_key => "/etc/pki/tls/private/device-nls.key"
ssl_enable => true
format => 'json'
}Thanks already and grtz
Willem
). I am willing to look more into this as time permits though, so this won't be it.