esatterly/splunk-cassandra

Splunk Cassandra ConnectRequiresSplunk Python SDK libs intalled or splunk-sdk-python on PYTHONPATHCassandraResources:$CASSANDRA_HOME/README.txthttp://wiki.apache.org/cassandra/GettingStartedContribpycassa 1.7.2Installed in {app}/bin/pycassaCQL 1.4.0Installed in {app}/bin/cqlRunning the applicationStart Cassandra Cluster and verify listening on 9160Inspecting CassandraLaunch the Cassandra CLIcd $CASSANDRA_HOME/bin./cassandra-cli --host localhostGet listing of available keyspaces:show keyspaces;Initial App Setupedit {app}/bin/setting.pyset Cassandra Host and Port## Note v.Next will have UI setup for multi clusterInstall universal forwarder on all cassandra nodes Add a splunk forwarder and this entry to /loca/inputs.conf [monitor:///var/log/cassandra/*] index=casslogsVerify logs are coming into the casslogs indexRun {app}/bin/python dbschema.py and verify keyspace config shows upRun {app}/bin/python dbdiscover.py and verify all Column_Families show upCommands Info[dbcql]dbcql.pyUSAGE: dbcql {query}# A query may consist of multiple expressions. We execute each of# the expressions in order and output the results from the final# expression. The primary scenario is:## "USE {keyspace}; SELECT * FROM {Column_family} WHERE {Conditions}""#[dbinsert]dbinsert.pyUsage: dbinsert {cfpath} {key} {fields}# cfpath must be Keyspace.Column_family notation[dblookup]dblookup.pyUsage: dblookup {cfpath} {key}# cfpath must be Keyspace.Column_family notation[dbschema]dbschema.pyUSAGE: dbschema << None OR Keyspace OR Keyspace Column_Family# Can use No parameters for cluster, a Keyspace or a Keyspace Column_family# dbschema ## Returns all schema information on cluster# dbschema {Keyspace} ## Returns all schema information for Keyspace = schema1# dbschema {Keyspace} {Column_family} ## Returns all schema information for Column_Family[dbgetkeys]dbgetkeys.pyUsage: dbgetkeys {Keyspace Column_Family}# Must be run with both elements Keyspace and Column_family# Returns a complete list of Row Keys in format Keyspace,Column_Family,Key[dbdiscover]dbdiscover.pyUsage: dbdiscover# Collects all keyspaces and column_families on the cluster in# keyspace=system,column_family=schema_keyspaces formatConfiguration Verification| dbcql "create keyspace test with strategy_class='LocalStrategy'"| dbschema| dbcql "use test; create columnfamily test (KEY varchar PRIMARY KEY)"| dbschema test.test| dbinsert test.test user_id "johnsmith,jsmith"| dbcql "use test; select * from test"| dbcql "use test; select * from test" | search jsmith | stats count| dbcql "use test; drop columnfamily test"| dbschema test| dbcql "drop keyspace test"| dbschema