|
1 month ago | |
---|---|---|
migrations | 1 month ago | |
src | 1 month ago | |
.env | 1 month ago | |
.gitignore | 1 month ago | |
Cargo.lock | 1 month ago | |
Cargo.toml | 1 month ago | |
LICENSE | 1 month ago | |
README.md | 1 month ago | |
diesel.toml | 1 month ago | |
docker-compose.yml | 1 month ago |
Kleene generates patterns composed from a group of log files that share common data. It can then use this data to then match against a larger set of log files to determine which of them matches the content.
Soon, you will be able to register your logs in a database for ongoing pattern revision. Additionally, further enhancements to the pattern generation algorithm are expected to come soon.
Get a copy of cargo, a tool to drive rust builds. Then,
cargo install --git https://code.hollensbe.org/erikh/kleene
There are currently two commands:
kleene train <files> > pattern_file
, which emits a pattern over standard
output; kleene
patterns have null characters in them (\0
) so it is
important they are not copy-pasted. Redirect standard output to a file.kleene match <files> < pattern_file
accepts a pattern over standard input and
matches it against the files, terminating immediately on the first mismatch
currently.It should perform reasonably well on large files.
Erik Hollensbe github@hollensbe.org
MIT