syslog

Processing and Analysing syslog with ksqlDB

See https://rmoff.net/2019/12/18/detecting-and-analysing-ssh-attacks-with-ksqldb/

Setup

• Clone the git repo

  git clone https://github.com/confluentinc/demo-scene.git

• Launch the stack

  cd syslog
  docker-compose up -d

ksqlDB

To start with, get a ksqlDB prompt:

docker exec -it ksqldb-cli bash -c 'ksql http://ksqldb-server:8088'

syslog

See also…

• We ❤️ syslogs: Real-time syslog Processing with Apache Kafka and KSQL – Part 1: Filtering

• We ❤ syslogs: Real-time syslog Processing with Apache Kafka and KSQL – Part 2: Event-Driven Alerting with Slack

• We ❤️ syslogs: Real-time syslog processing with Apache Kafka and KSQL – Part 3: Enriching events with external data