Skip to content

Simple API/UI for testing filebeat dissect patterns against a collection of sample log lines.

License

Notifications You must be signed in to change notification settings

jorgelbg/dissect-tester

Folders and files

NameName
Last commit message
Last commit date

Latest commit

04ca823 ยท Oct 23, 2023
Oct 23, 2023
Oct 31, 2020
Oct 23, 2023
Oct 23, 2023
Feb 14, 2020
Apr 30, 2020
Apr 27, 2020
Feb 19, 2020
May 12, 2020
Feb 19, 2020
Aug 24, 2020
Jul 9, 2021
Oct 2, 2022
Oct 5, 2022
Oct 5, 2022
Nov 15, 2021
Nov 15, 2021
May 31, 2022
Oct 8, 2021
Feb 11, 2020
Apr 30, 2020

Repository files navigation

dissect-tester

Filebeat Docker pulls

dissect-tester logo

This project presents a simple web UI to test a collection of log line samples against a pattern supported by the Filebeat dissect processor.

Both Logstash and Elasticsearch pipelines have a similar filter/processor that uses the same configuration pattern. Therefore, this UI can be used to test a pattern that will be used in either Logstash or Elasticsearch pipelines.

๐ŸŽฎ Installing / Getting started

๐Ÿ”— If you only want to test some samples you can go directly to the demo instance running in http://dissect-tester.jorgelbg.me/.

New releases are published to a public Docker image. To run it you can use the following command:

docker run --rm -ti -p 8080:8080 jorgelbg/dissect-tester

The terminal should print a couple of messages similar to

{"level":"info","timestamp":"2020-06-30T01:42:16.838+0200","caller":"dissect-tester/main.go:112","msg":"maxprocs: Leaving GOMAXPROCS=8: CPU quota undefined"}
{"level":"info","timestamp":"2020-06-30T01:42:16.838+0200","caller":"dissect-tester/main.go:137","msg":"Server is running","port":8080}

Indicating the the server is running. Head your browser to http://localhost:8080/ and enjoy ๐ŸŽ‰.

Your browser should show the following:

Screenshot

๐Ÿ‘จ๐Ÿปโ€๐Ÿ’ป Developing

git clone https://github.com/jorgelbg/dissect-tester
cd dissect-tester/
make

This will build a binary placed in bin/github.com/jorgelbg/dissect-tester for your native platform.

If you want to build a new Docker image use the following command:

make docker

For running all tests you can use:

make test

๐Ÿคš๐Ÿป Contributing

If you'd like to contribute, please fork the repository and use a feature branch. Pull requests are warmly welcome.

๐Ÿš€ Links