Strace container output to a file, then shove the syscalls into elastic search.

Clone this repo:

Branches

  1. 02e92c1 jfrazelle -> jessfraz by Jess Frazelle · 1 year, 2 months ago master
  2. 4df62ec update dockerfile by Jess Frazelle · 1 year, 2 months ago
  3. c8f56e1 log on error by Jessica Frazelle · 1 year, 10 months ago
  4. dcd8162 skip and log offending lines, dont throw exception by Jessica Frazelle · 1 year, 10 months ago
  5. e57c989 instructions by Jessica Frazelle · 1 year, 10 months ago

strace2elastic

Strace container output to a file, then shove the syscalls into elastic search.

$ strace2elastic.py
Usage: strace2elastic.py [OPTIONS] [FILE]

Options:
  -h, --help                        Print this help message and exit
  -e, --elastichost HOST:PORT       Elastic search instance
  -c, --container   CONTAINER_NAME  Container name

Just add strace-process.sh as a PostStart hook in your runc runtime config. See jessfraz/containers/notify-osd/runtime.json as an example.

Huge thanks to dirtyharrycallahan/pystrace