The SPP Log analyzer was created to help support engineers parse and read logcollect bundles created by the SPP appliance.
Sppanalyzer runs as a web application.
sppanalyzer uses the Python-based Flask framework. Flask is a lightweight web framework used to create web applications.
http://flask.pocoo.org/docs/1.0/
Users can upload system log zip bundles to the server
The server unpacks/unzips the log bundles automatically
Logs are stored using a unique "key" which allows users to return to log analysis without re-uploading
Output is arranged at a top level by job session
Information about the job session such as start date, status, and associated resources is displayed
Each job session can be analyzed to output related log messages
The Flask framework has many different options for deployment. Based on current architecture a Linux platform is required in order to run the text parsing scripts.
http://flask.pocoo.org/docs/1.0/deploying/
Our internal environment is running CentOS 7 and using the uWSGI service running on port 3000 which forwards to Apache running on the default HTTP port 80. The following guide outlines the installation of uWSGI, Apache, Python, and other dependencies on CentOS7:
https://mitchjacksontech.github.io/How-To-Flask-Python-Centos7-Apache-uWSGI/
uwsgi.py (located in root of cloned repository):
import os
from sppanalyzer import app as application
if __name__ == "__main__":
port = int(os.environ.get('PORT', 5000))
application.run(host='0.0.0.0', port=port)
app.ini (located in root of cloned repository):
[uwsgi]
module = wsgi
master = true
processes = 5
socket = 127.0.0.1:8000
chmod-socket = 660
vacuum = true
die-on-term = true
logto = /tmp/errlog
/etc/systemd/system/sppanalyzer.service
[Unit]
Description=uWSGI server for sppanalyzer
After=network.target
[Service]
User=sppanalyzer
Group=sppanalyzer
WorkingDirectory=/sppanalyzer
Environment="PATH=/sppanalyzer/.env/bin:/usr/bin:/bin"
ExecStart=/sppanalyzer/.env/bin/uwsgi --ini app.ini
[Install]
WantedBy=multi-user.target