genlogstatcoll 0.1

genlogstatcoll is a generic collector to collect statistic data from log file delivered in via a syslog interface and provided via the AgentX interface through a SNMP daemon.

A syslog daemon (for instance syslog-ng) has to be configured to send relevant data (for instance the messages on the facility MAIL) to the genlogstatcoll too.

Considering the genlogstatcoll input interface is configured on 172.16.1.12, port 9514, this config line for syslog-ng will do the trick:

destination maillog { file("/var/log/mail/$YEAR/$MONTH/$DAY/mail.log"
create_dirs(yes) dir_perm(0755) owner("root") group("mail")
perm(0640)); udp("172.16.1.12" port(9514)); };

An SNMP daemon (for instance net-snmp 5.2.3) has to be configured to open the AgentX interface.

Considering the SNMP daemon should open the interface on 172.16.1.12, port 9161, these line in the snmpd.conf will do it:

master agentx
AgentXSocket 172.16.1.12:9161

Now, you can configure a facility to filter the input data, a SNMP oid to mount on and a couple of regexes, to count their matches in the log data.