GoLang Syslog Data Enrichment

agolangf · · 1010 次点击    
这是一个分享于 的资源,其中的信息可能已经有所发展或是发生改变。
<p>Hey guys,</p> <p>So I&#39;m fairly new to ramping up on GoLang, this is the first formal language I&#39;m attempting to become proficient in. I&#39;m fairly competent with scripting (bash, etc.), and know enough python to be dangerous.</p> <p>Anyways, on to my potential project:</p> <p>I have a security project that does not provide a rich enough dataset via the syslog output. I&#39;ve messed with the products API, and have concluded that there is an API result that contains all the information I want. I&#39;m not sure on how to begin this project, but before I want to begin I want to know if its possible to do the following:</p> <ol> <li>Monitor a syslog file (LEEF format).</li> <li>Upon a newline being written, take two fields from the syslog (id/segment_id) and conduct an API lookup.</li> <li>Take the API results and create a new file with some contents from the original syslog message + some contents of the json API results.</li> <li>Write this new file (in .csv format) out to a directory where it can be scraped by a log forwarding technology.</li> </ol> <p>Let me know what you guys think. Any pointers in the right direction is definitely appreciated.</p> <p>Thanks!</p>

入群交流(和以上内容无关):加入Go大咖交流群,或添加微信:liuxiaoyan-s 备注:入群;或加QQ群:692541889

1010 次点击  
加入收藏 微博
0 回复
暂无回复
添加一条新回复 (您需要 登录 后才能回复 没有账号 ?)
  • 请尽量让自己的回复能够对别人有帮助
  • 支持 Markdown 格式, **粗体**、~~删除线~~、`单行代码`
  • 支持 @ 本站用户;支持表情(输入 : 提示),见 Emoji cheat sheet
  • 图片支持拖拽、截图粘贴等方式上传