Loading src/main.py 0 → 100644 +19 −0 Original line number Diff line number Diff line ingest_server = 'https://nlsd-ingest.example.com' print('set ingest server to ' + ingest_server) # Get server auth key # authkey = 'your-key-here' infile = open('/home/nlsd/key', 'r') authkey = infile.readline() # Imports for Libraries import sys import base64 import requests from sh import tail for line in tail("-F", "/var/log/ufw.log", _iter=True): # Encode in base64 for transport log_line_encoded = base64.b64encode(line) payload = {'key': authkey, 'log': log_line_encoded} r = requests.post(ingest_server + '/api/nlsingest/logevent', params=payload) print(r.text) src/nlsd.service 0 → 100644 +14 −0 Original line number Diff line number Diff line [Unit] Description=nlsd firewall log aggregator daemon After=multi-user.target [Service] WorkingDirectory=/home/nlsd/ User=nlsd ExecStart=/usr/bin/python /home/nlsd/nlsd.py Type=simple Restart=always RestartSec=3 [Install] WantedBy=multi-user.target No newline at end of file src/requirements.txt 0 → 100644 +0 −0 Empty file added. Loading
src/main.py 0 → 100644 +19 −0 Original line number Diff line number Diff line ingest_server = 'https://nlsd-ingest.example.com' print('set ingest server to ' + ingest_server) # Get server auth key # authkey = 'your-key-here' infile = open('/home/nlsd/key', 'r') authkey = infile.readline() # Imports for Libraries import sys import base64 import requests from sh import tail for line in tail("-F", "/var/log/ufw.log", _iter=True): # Encode in base64 for transport log_line_encoded = base64.b64encode(line) payload = {'key': authkey, 'log': log_line_encoded} r = requests.post(ingest_server + '/api/nlsingest/logevent', params=payload) print(r.text)
src/nlsd.service 0 → 100644 +14 −0 Original line number Diff line number Diff line [Unit] Description=nlsd firewall log aggregator daemon After=multi-user.target [Service] WorkingDirectory=/home/nlsd/ User=nlsd ExecStart=/usr/bin/python /home/nlsd/nlsd.py Type=simple Restart=always RestartSec=3 [Install] WantedBy=multi-user.target No newline at end of file