[ygrok] Patterns for vmstat, df, du, ps

[preaction]

The core utils should have built-in grok patterns.

This is how we make workflows from common unix tools!

Possibilities:

• ls -l
• ps
  • ps
  • ps x
  • ps u
• vmstat
• df -P (POSIX output)
  • Allow multiline groks so we don't need the -P flag?
• du
  • Kind of useless, but who knows?
  • the standard unix tools already work well here
• netstat
• lsof

Perhaps we also want patterns for common unix files like:

• /etc/passwd
• /etc/mtab
• /etc/fstab
• /etc/hosts
  • Allow a repeated pattern for an array of things?

So the idea here is that we can build a workflow based on these tools, moving data from them to a database, or over a messaging layer to some alerting tool.

[preaction]

Perhaps we add these to "POSIX" namespace?

[preaction]

Not all of this is POSIX, but when it is, put it in the POSIX namespace. Namespaces are great!

[preaction]

Straight ps differs from OSX and OpenBSD, but ps u and ps x does not. I didn't test any GNU systems.

[preaction]

procps is what has iostat, vmstat, and a new one i've never seen before, mpstat, which looks like it could be very nice for machine statistics.