Skip to content

Latest commit

 

History

History
31 lines (14 loc) · 1.33 KB

README.md

File metadata and controls

31 lines (14 loc) · 1.33 KB

This tool listens to a syslog port and it can detect incoming EPS (Event per Second) values and data size. It groups log sources by current second, minute and hour on any operating system.

It may be used for estimating hardware requirements for log servers or SIEMs.

ss1

It works with parameters like any CLI application. You can configure this tool to group events by source IP or source IP and port. This way, logs from multiple sources can be easily monitored. In addition to this, the port number to listen to can be configured by parameter along with TCP or UDP support.

ss2

When you use ctrl + c combination for exit, then the application stores the latest state as a text file if you don't prevent this with parameter.

TCP

ss3

UDP

ss4

Limitations

Preliminary tests with Syslog-ng's loggen test tool, show that EpsMeter responds with high accuracy even at 10000 EPSs.

Download EpsMeter