glastopf/glastopf — pull request #190 by srizzling (2014-08-26 04:38:17+00:00)
Title: Fixes #177: Adding Logstash Support

This PR supports pushing attack log data to logstash.

Although, I'm still open to what data I should be pushing to the logstash server. I have modelled the data around the log handler provided via log_syslog handler.

I guess I can say my motivation for using logstash. I basically want to create a visual dashboard, that can collect results from multiple a cluster of glastopf server, and use something like Kibana or Graphite (or even d3) to visualize and display the results. So the information currently being pushed to logstash isn't the greatest (i.e all the information is there just not in a good format).

I tried using the already defined method event_dict() on the attack event object, but python isn't my "forte" and wasn't able to make it work. I *think* the problem is associated with how record objects, are created and it can't share the same fields, within the extra parameter, but I couldn't see any fields that were shared :/.

Please excuse my noobness :P