App-ElasticSearch-Utilities
view release on metacpan or search on metacpan
Change: d52dc0d7c7672e57a25a680096397866c61591c6
Author: Brad Lhotsky <brad@divisionbyzero.net>
Date : 2023-08-18 10:04:19 +0000
Incorporate feedback on removing implicit returns
----------------------------------------
version 8.6 at 2023-07-20 15:53:17 +0000
----------------------------------------
Change: 69b286e396cc816a60053c94df43713ea390d24a
Author: Brad Lhotsky <brad@divisionbyzero.net>
Date : 2023-07-20 08:53:17 +0000
Preparing 8.6 Release
* Add `App::ElasticSearch::Utilities::Metrics`
* Convert es-graphite-dynamic.pl to use
App::ElasticSearch::Utilities::Metrics * Updates for
`App::ElasticSearch::Utilities::Aggregations`:
* `YAML::XS` is more compatible with other YAML parsers * Enable boolean
detection for `es-search.pl`
Change: 400b50196d211697fe4d40cca9b587b72d981e48
Author: Brad Lhotsky <brad@divisionbyzero.net>
Date : 2022-06-01 17:59:00 +0000
Fix display of statistics so they all follow --precision
Change: c6c0e96db37f637bc62492acda8072700244d342
Author: Brad Lhotsky <brad@divisionbyzero.net>
Date : 2022-06-01 04:20:05 +0000
Add client certificate authentication to the tooling
Change: ee969f539f64bd15bd3c3e30cd85cf273b728a1c
Author: Brad Lhotsky <brad@divisionbyzero.net>
Date : 2022-06-01 03:56:41 +0000
Correct version check for TLS and Auth
scripts/es-search.pl view on Meta::CPAN
# Search for past 10 days vhost admin.example.com and client IP 1.2.3.4
es-search.pl --days=10 --size=100 dst:"admin.example.com" AND src_ip:"1.2.3.4"
# Search for all apache logs past with status 500
es-search.pl program:"apache" AND crit:500
# Search for all apache logs with status 500 show only file and out_bytes
es-search.pl program:"apache" AND crit:500 --show file,out_bytes
# Search for ip subnet client IP 1.2.3.0 to 1.2.3.255 or 1.2.0.0 to 1.2.255.255
es-search.pl --size=100 dst:"admin.example.com" AND src_ip:"1.2.3.0/24"
es-search.pl --size=100 dst:"admin.example.com" AND src_ip:"1.2.0/16"
# Show the top src_ip for 'www.example.com'
es-search.pl --base access dst:www.example.com --top src_ip
# Tail the access log for www.example.com 404's
es-search.pl --base access --tail --show src_ip,file,referer_domain dst:www.example.com AND crit:404
=head1 NAME
( run in 0.421 second using v1.01-cache-2.11-cpan-7add2cbd662 )