napalm-logs 0.11.0

Python库，用于解析网络设备的syslog消息并生成JSON序列化Python对象，具有厂商无关性。输出对象遵循OpenConfig或IETF YANG模型。

例如，以下来自Juniper设备的syslog消息

Mar 30 12:45:19 re0.edge01.bjm01 rpd[15852]: BGP_PREFIX_THRESH_EXCEEDED 1.2.3.4 (External AS 15169): Configured maximum prefix-limit threshold(160) exceeded for inet-unicast nlri: 181 (instance master)

将生成以下对象

      {
        "yang_message": {
              "bgp": {
                "neighbors": {
                      "neighbor": {
                        "192.168.140.254": {
                              "state": {
                                "peer_as": "65001"
                              },
                              "afi_safis": {
                                "afi_safi": {
                                      "inet4": {
                                        "state": {
                                              "prefixes": {
                                                "received": 141
                                              }
                                        },
                                        "ipv4_unicast": {
                                              "prefix_limit": {
                                                "state": {
                                                      "max_prefixes": 140
                                                }
                                              }
                                        }
                                      }
                                }
                              }
                        }
                      }
                }
              }
        },
        "message_details": {
              "processId": "2902",
              "severity": 5,
              "facility": 18,
              "hostPrefix": null,
              "pri": "149",
              "processName": "rpd",
              "host": "vmx01",
              "tag": "BGP_PREFIX_THRESH_EXCEEDED",
              "time": "14:03:12",
              "date": "Jun 21",
              "message": "192.168.140.254 (External AS 65001): Configured maximum prefix-limit threshold(140) exceeded for inet4-unicast nlri: 141 (instance master)"
        },
        "timestamp": 1498050192,
        "facility": 18,
        "ip": "127.0.0.1",
        "host": "vmx01",
        "yang_model": "openconfig-bgp",
        "error": "BGP_PREFIX_THRESH_EXCEEDED",
        "os": "junos",
        "severity": 5
      }
}

该库附带一个命令行程序，作为守护程序运行在后台，持续监听syslog消息，然后通过安全通道发布它们，多个客户端可以订阅。

它可以灵活地通过UDP或TCP监听syslog消息，也可以从Apache Kafka等代理中监听。同样，输出对象可以通过各种渠道发布，例如ZeroMQ、Kafka或远程服务器日志。它还足够灵活，可以扩展这些功能，根据需要监听或发布到其他服务。

消息通过安全通道发布，加密并签名。尽管可以禁用安全功能，但强烈建议不要这样做。

pip install napalm-logs