path: root/src/lib (unfollow)
AgeCommit message (Collapse)Author
2014-02-10Fix an infinite loop if elasticsearch goes crazy.Guillaume Friloux
We had a case here where elasticsearch stopped answering to HTTP queries SMMAN was sending. This led SMMAN to a state where he had 1015 sockets opened to elasticsearch, and constantly trying to open logfiles as they had new logs in it, but unable to open them because we reached the 1024 nofile limit. So this patch change behavior : - Add a 10s timeout to ecore_con_url objects - Dont instantly stat() files right after processing if an error happenned at last try. This bug happenned twice here with a server sending over 1k logs in the same second.
2014-01-14Fix 2 memory leaks.v2.0.1Guillaume Friloux
- One leak concerning the Log structure not being freed if there is a rule matching it that has delete = 1 - One leak happening when elasticsearch server is down.
2014-01-07Make libstore to be more verbose on errors.Guillaume Friloux
2014-01-07Add into store_add() et better log message, having the data displayed.Guillaume Friloux
2014-01-07Fix the use of Rules_Load for loading each rule that is freed afterGuillaume Friloux
listing all the files from the rules directory ... We create a Rule_Load structure for this now.
2014-01-02Fix rule name for deletion of logs, to be compatible with smman 1.0.0.Guillaume Friloux
2014-01-02More doc.Guillaume Friloux
2014-01-02Improve documentation.Guillaume Friloux
2013-12-30Add some doc.Guillaume Friloux
2013-12-27Make Smman catch SIGUSR1 signals to reload rules. Make Smman v2.0.0Guillaume Friloux
2013-12-26Smman can now insert logs into ES.Guillaume Friloux
2013-12-26Allow to pause/resume poll over a file.Guillaume Friloux
2013-12-26Adding JSON library.Guillaume Friloux
2013-12-26Tranform tags into a list, to ease the JSON conversion in smman.Guillaume Friloux
2013-12-26Fix memory leaks in libconf.Guillaume Friloux
2013-12-26Simplify code & avoid a behavior with ecore_timer_pause.Guillaume Friloux
Even if you pause a timer, you may have pending calls to that timer that wont get stopped. This led to multiple threads working on the same spy_file.
2013-12-23Add libstore that will take care of sending json data to elasticsearchGuillaume Friloux
2013-12-20Make Smman able to filter logs and tag them.Guillaume Friloux
Next step is turning logs into JSON and send them to ES.
2013-12-19Rules are now completly loaded.Guillaume Friloux
Next step is to setup the spy library to put a watch on each log file matching the globs from rules.
2013-12-19Smman can now load its conf file and fake loading of rules.Guillaume Friloux
Next step is to compile regexes and find log files to watch.
2013-12-18Add librules and fix other libs.Guillaume Friloux
2013-12-17Delete old libconf file.Guillaume Friloux
2013-12-17Rewrite of libconf to be clean. SMMAN BROKEN AT THIS COMMIT!Guillaume Friloux
2013-12-16No need to init eio. We dont use it.Guillaume Friloux
2013-12-16Create event from main loop and not a thread.Guillaume Friloux
2013-12-16Adding libspy.Guillaume Friloux
It needs to be used by smman as this will consume less cpu cycles than managing inotify events. When having a lot of logs, inotify events gets too annoying, thus the fact that we miss some of them. With libspy, files will be polled periodically, no matter the activity on them.
2013-12-13Rework build, move libconf to lib folder.Guillaume Friloux