Skip to content

Detect incoming EPS (Event per Second) values and data size.

License

Notifications You must be signed in to change notification settings

semsaksoy/EpsMeter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

36 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

This tool listens to a syslog port and it can detect incoming EPS (Event per Second) values and data size. It groups log sources by current second, minute and hour on any operating system.

It may be used for estimating hardware requirements for log servers or SIEMs.

ss1

It works with parameters like any CLI application. You can configure this tool to group events by source IP or source IP and port. This way, logs from multiple sources can be easily monitored. In addition to this, the port number to listen to can be configured by parameter along with TCP or UDP support.

ss2

When you use ctrl + c combination for exit, then the application stores the latest state as a text file if you don't prevent this with parameter.

TCP

ss3

UDP

ss4

Limitations

Preliminary tests with Syslog-ng's loggen test tool, show that EpsMeter responds with high accuracy even at 10000 EPSs.

Download EpsMeter

About

Detect incoming EPS (Event per Second) values and data size.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages