Merge pull request #20 from rebortg/add/system

Add/system
This commit is contained in:
Kim 2019-03-25 21:33:43 +01:00 committed by GitHub
commit 5679114d22
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 77 additions and 1 deletions

View File

@ -0,0 +1,48 @@
.. _event-handler:
Event Handler
-------------
Event handler allows you to execute scripts when a string that matches a regex appears in a text stream (e.g. log file).
It uses "feeds" (output of commands, or a named pipes) and "policies" that define what to execute if a regex is matched.
.. code-block:: sh
system
event-handler
feed <name>
description <feed description>
policy <policy name>
source
preset
syslog # Use the syslog logs for feed
custom
command <command to execute> # E.g. "tail -f /var/log/somelogfile"
named-pipe <path to a names pipe>
policy <policy name>
description <policy description>
event <event name>
description <event description>
pattern <regex>
run <command to run>
In this small example a script runs every time a login failed and an interface goes down
.. code-block:: sh
vyos@vyos# show system event-handler
feed Syslog {
policy MyPolicy
source {
preset syslog
}
}
policy MyPolicy {
description "Test policy"
event BadThingsHappened {
pattern "authentication failure"
pattern "interface \.* index \d+ .* DOWN.*"
run /config/scripts/email-to-admin
}
}

View File

@ -0,0 +1,26 @@
.. _flow-accounting:
Flow Accounting
---------------
VyOS supports flow accounting through NetFlow or sFlow.
For both types you need to specify the interfaces for which the data will be collected:
.. code-block:: sh
set system flow-accounting interface eth0
set system flow-accounting interface bond3
NetFlow is a protocol originating from Cisco Systems. It works on level3.
VyOS supports version 1, 5 and 9
NetFlow v5 example:
.. code-block:: sh
set system flow-accounting netflow engine-id 100
set system flow-accounting netflow version 5
set system flow-accounting netflow server 192.168.2.10 port 2055

View File

@ -11,6 +11,8 @@ should be ready for further configuration which is described in this chapter.
:maxdepth: 2 :maxdepth: 2
:hidden: :hidden:
eventhandler
flowaccounting
host-information host-information
systemusers systemusers
syslog syslog