linux下用python写的一个syslog服务进程脚本

234rfe

最近在折腾rsyslog+loganalyzer+mysql，搭建OK，无奈rsyslogd识别华为交换机输出日志的格式有点偏差，只能自己在rsyslog服务器上重新写一个进程，用来接收华为交换机的info-center，并写入数据库里，代码如下（基本没做错误检测机制）

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67

#!/usr/bin/python import MySQLdb,time,datetime from socket import * host = '172.16.0.45' port = 514 addr = (host,port) s = socket(AF_INET,SOCK_DGRAM) s.bind(addr) db = MySQLdb.connect('172.16.0.45','rsyslog','p@ssw0rd','Syslog') cursor = db.cursor() cursor.execute('select version()') data = cursor.fetchone() print 'data ver is ', data Mothlist = {'Jan':1,'Feb':2,'Mar':3,'Apr':4,'May':5,'Jun':6,'Jul':7,'Aug':8,'Sep':9,'Oct':10,'Nov':11,'Dec':12} while 1:         client_data,client_addr = s.recvfrom(8092)         print 'got connection from ',client_addr         if '172.16.201.' not in str(client_addr):             print 'can not connect from except 172.16.201.0/24',str(client_addr)             continue         #file = open('log.txt','a')         #file.write(client_data + '\n')         #file.close()         datalist = client_data.split(' ')         print 'datalist = ',datalist         Moth = datalist[0][-3:]         Year = datalist[2]         Day = datalist[1]         SWtime = datalist[3].split('+')[0]         templist = datalist[5].split('/')         print 'templist = ',templist         Facility = templist[0]         Priority = templist[1]         ReportTime =  Year +  '-' + str(Mothlist[Moth]) + '-' + Day +' '+ SWtime         RecvTime = time.strftime('%Y-%m-%d %H:%M:%S',time.localtime())         FromHost = datalist[4]         client_ip = client_addr[0]         SysLogTag = templist[2]         Message = ''         #print datalist         for m in range(0,len(datalist)): #               print 'm is ',m                 try:Message = Message + datalist[5+m]                 except:pass #       print 'msg is', Message         sql = "INSERT INTO SystemEvents(Priority,ReceivedAt,DeviceReportedTime, FromHost, FromIP,SysLogTag, Message) VALUES ('%s', '%s', '%s','%s','%s','%s','%s')" %(Priority,RecvTime,ReportTime,FromHost,client_ip,SysLogTag,Message) #       sql = """INSERT INTO SystemEvents(ReceivedAt,DeviceReportedTime, FromHost, FromIP, Message) VALUES ('2015-08-08 8:8:8', '2018-9-9 9:9:9', 'host test', '2.2.2.2', 'messssss')"""         #print 'sql is :',sql         cursor.execute(sql)         db.commit()         #print '*'*20 db.close()

最后，用后台免登陆执行

1	nohup sw_logserver.py &