Open Source Python Logging Software - Page 3

PyIDS is an intrusion detection system whose aim is to provide concise information to administrators about some parts of the system i.e filesystem checksums, unknown connections to the machine, access control lists of special files, log revision...

PyLogAnalyzer is a tool that receives an input log in black and white, a configuration INI file, which contains the list of rules to process the input, and an output file where to save the results. These rules permit to detect an input line according to a regular expression (regex) or line number range, filter it, pass it, colorise in foreground and background, columnise the groups of the regex and enable or disable the rule. The final goal of this tool is to ameliorate reading long and difficult b/w logs, speed up the analysis and enhance day to day wearying activities. As common application, you can colorise adb logcat logs taking the example files and using them (and also, filter unnecessary lines). You can INSTALL it from PyPI: $ python -m pip install pyloganalyser

Python gen-purpose log monitoring tool. Can track several log files at once, and trigger actions by regexp matching. Actions are defined via modules with a very simple interface to implement. It can monitor syslog as well as gather web server stats.

Open Source system and network monitoring application for desktop Linux user. It gives end-user broader view of what happening on their system. The basic idea is give linux user application that can monitor system like many commercial antivirus HIDS.

py-rrdtool is a Python module provides an interface to RRDTool, the well known graphing/logging tool.

The RESPOND-R framework is a modular, distributed data logging framework built for the purpose of studying Emergency Informatics as it relates to human robot performance during disaster responses. Tutorials can be found on the wiki: https://sourceforge.net/p/respondr/wiki/

RRFiller provides an easy-to-use solution for logging statistics into an RRDTool database. Designed to complement RRGrapher, the project also provides configurations for creation and updating RRD databases using standard tools like vmstat and netstat.

Rxlogd is a receive-only syslog server (collector) that can coexist with sysklogd. It features simplicity, ease of use and a built-in dns cache for high performance.

This project is a python script to abstract S.M.A.R.T. messages from /var/log/messages (from the smartd daemon) into .csv file(s), one for each disk, suitable for graphing.

ssl_logger is a Python-based tool that decrypts and logs a target process’s SSL/TLS traffic on Linux and macOS. It attaches to a running process by name or PID and hooks SSL_read and SSL_write calls to capture plaintext data flowing through encrypted connections. Output can be streamed to the console with verbose metadata or written to a PCAP file for later analysis in standard tooling. The utility is powered by dynamic instrumentation using the Frida framework, allowing it to intercept function calls without recompiling or modifying the target binary. Typical workflows include debugging custom clients, validating protocol implementations, or inspecting troubleshooting traces when only an encrypted channel is available. While focused on libssl-based traffic, the project outlines future enhancements for broader TLS library coverage and process-launch capture flows.

Experiment tracking in SageMaker Training Jobs, Processing Jobs, and Notebooks. SageMaker Experiments is an AWS service for tracking machine learning Experiments. The SageMaker Experiments Python SDK is a high-level interface to this service that helps you track Experiment information using Python. Experiment tracking powers the machine learning integrated development environment Amazon SageMaker Studio. Experiment: A collection of related Trials. Add Trials to an Experiment that you wish to compare together. Trial: A description of a multi-step machine learning workflow. Each step in the workflow is described by a Trial Component. There is no relationship between Trial Components such as ordering. Trial Component: A description of a single step in a machine learning workflow. For example data cleaning, feature extraction, model training, model evaluation, etc.

The Secure Remote Log Monitor (SRLM) project provides client and server utilities that collect application or system log files from multiple systems over an untrusted network onto a central server for analysis and action.

Shadow Watcher is a Peer to Peer log sharing tool for the security analyst. Consider it a "community watch" program which allows you to keep your system secure from the threats on the internet and help others do the same.

Snort IDS library for Python

Graphical or terminal-based stopwatch with many user-named lap timers. Save / restore timing results via CSV file; timer "runs" even when application isn't running! Supports lap timer label templates. Hildonized (i.e., also runs on Maemo / Nokia 770).

This program summarizes the contents of a log file written by syslog, by displaying each unique (except for the time) line once, and also the number of times such a line occurs in the input. The lines are displayed in the order they occur in the input.

Syslog Collector listen for syslog messages and parse them following some regular expressions. It then increment some counters which are exposed through SNMP Agent-X interface

Tail is a graphical interface for following files, similar to the *nix command tail -f. Tail can monitor and show multiple files, parse file changes for optional keywords, and optionally notify you of changes both visually and audibly.

A tool to visualize interactively huge amounts of eventdata. Uses an innovative hierarchical zoomlens scaling from quarters down to 50 ms.

Upstream is a collection of tools that allow users to send in system specific log and troubleshooting data to support personnel. Furthermore, developers can use Upstream to enhance the scope of their bug/support tracking systems.

A system to log and track user logons, logoffs, computer information, and statistics in a Microsoft Windows environment. It includes a client side application (veloapport.exe - intended to be run as a logon and logoff script) and an analyzer (veloapportdetective.py) reporting hardware changes and populates a computer inventory table. The client (veloapport.exe) sends user and machine information to a MySQL database server and VeloApport Detective populates a computer inventory table while also detecting changes and if the system drive is running out of free space.

Operating system & software monitoring utility designed to be modular and reliable. Its purpose is to monitor various system state and services in a uniform way.

YAML (tm) is a straight-forward data serilization language, offering an alternative to XML where markup (named lists and mixed content) are not needed. YAML borrows ideas from rfc822, SAX, C, HTML, Perl, and Python.

apt-history logs the changes of /var/lib/dpkg/status when installing, removing, upgrading packages with apt-get.

arclog archives the log files monthly. It supports Apache access log, Syslog, NTP, Apache 1 SSL engine log, modified ISO date/time log file formats, and Apache-like logs like CUPS, ProFTPD, Pure-FTPd… etc., and gzip and bzip2 compression methods.