Skip to main content

CMRESHandler.py

License Python versions supported Package stability Daily PyPI downloads

Python Elasticsearch Log handler 2

This library provides an Elasticsearch logging appender compatible with the python standard logging library.

The code source is in github at https://github.com/drumadrian/python-elasticsearch-logger

This library is a fork from https://github.com/cmanaha/python-elasticsearch-logger

The fork was intened to add a session token for usage in AWS with non permanent credentials.

The AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for users that you authenticate (federated users).

Installation

Install using pip:

pip install CMRESHandler2

Requirements Python 2

This library requires the following dependencies
  • elasticsearch

  • requests

  • enum

Requirements Python 3

This library requires the following dependencies
  • elasticsearch

  • requests

Additional requirements for Kerberos support

Additionally, the package support optionally kerberos authentication by adding the following dependecy
  • requests-kerberos

Additional requirements for AWS IAM user authentication (request signing)

Additionally, the package support optionally AWS IAM user authentication by adding the following dependecy
  • requests-aws4auth

Using the handler in your program

To initialise and create the handler, just add the handler to your logger as follow

import logging
from cmreslogging.handlers import CMRESHandler
handler = CMRESHandler(hosts=[{'host': 'localhost', 'port': 9200}],
                           auth_type=CMRESHandler.AuthType.NO_AUTH,
                           es_index_name="my_python_index")
log = logging.getLogger("PythonTest")
log.setLevel(logging.INFO)
log.addHandler(handler)

You can add fields upon initialisation, providing more data of the execution context

import logging
from cmreslogging.handlers import CMRESHandler
handler = CMRESHandler(hosts=[{'host': 'localhost', 'port': 9200}],
                           auth_type=CMRESHandler.AuthType.NO_AUTH,
                           es_index_name="my_python_index",
                           es_additional_fields={'App': 'MyAppName', 'Environment': 'Dev'})
log = logging.getLogger("PythonTest")
log.setLevel(logging.INFO)
log.addHandler(handler)

This additional fields will be applied to all logging fields and recorded in elasticsearch

To log, use the regular commands from the logging library

log.info("This is an info statement that will be logged into elasticsearch")

Your code can also dump additional extra fields on a per log basis that can be used to instrument operations. For example, when reading information from a database you could do something like:

start_time = time.time()
database_operation()
db_delta = time.time() - start_time
log.debug("DB operation took %.3f seconds" % db_delta, extra={'db_execution_time': db_delta})

The code above executes the DB operation, measures the time it took and logs an entry that contains in the message the time the operation took as string and for convenience, it creates another field called db_execution_time with a float that can be used to plot the time this operations are taking using Kibana on top of elasticsearch

Initialisation parameters

The constructors takes the following parameters:
  • hosts: The list of hosts that elasticsearch clients will connect, multiple hosts are allowed, for example

    [{'host':'host1','port':9200}, {'host':'host2','port':9200}]
  • auth_type: The authentication currently support CMRESHandler.AuthType = NO_AUTH, BASIC_AUTH, KERBEROS_AUTH

  • auth_details: When CMRESHandler.AuthType.BASIC_AUTH is used this argument must contain a tuple of string with the user and password that will be used to authenticate against the Elasticsearch servers, for example (‘User’,’Password’)

  • aws_access_key: When CMRESHandler.AuthType.AWS_SIGNED_AUTH is used this argument must contain the AWS key id of the the AWS IAM user

  • aws_secret_key: When CMRESHandler.AuthType.AWS_SIGNED_AUTH is used this argument must contain the AWS secret key of the the AWS IAM user

  • aws_session_token: When CMRESHandler.AuthType.AWS_SIGNED_AUTH is used this argument must contain the AWS session token of the the AWS IAM user

  • aws_region: When CMRESHandler.AuthType.AWS_SIGNED_AUTH is used this argument must contain the AWS region of the the AWS Elasticsearch servers, for example 'us-east'

  • use_ssl: A boolean that defines if the communications should use SSL encrypted communication

  • verify_ssl: A boolean that defines if the SSL certificates are validated or not

  • buffer_size: An int, Once this size is reached on the internal buffer results are flushed into ES

  • flush_frequency_in_sec: A float representing how often and when the buffer will be flushed

  • es_index_name: A string with the prefix of the elasticsearch index that will be created. Note a date with YYYY.MM.dd, python_logger used by default

  • index_name_frequency: The frequency to use as part of the index naming. Currently supports CMRESHandler.IndexNameFrequency.DAILY, CMRESHandler.IndexNameFrequency.WEEKLY, CMRESHandler.IndexNameFrequency.MONTHLY, CMRESHandler.IndexNameFrequency.YEARLY by default the daily rotation is used

  • es_doc_type: A string with the name of the document type that will be used python_log used by default

  • es_additional_fields: A dictionary with all the additional fields that you would like to add to the logs

Using the handler in your program with temporary AWS Credentials

To initialise and create the handler, just add the handler to your logger as follow

from cmreslogging.handlers import CMRESHandler
import logging
import os
import sys

AWS_ACCESS_KEY_ID=os.environ['AWS_ACCESS_KEY_ID']
AWS_SECRET_ACCESS_KEY=os.environ['AWS_SECRET_ACCESS_KEY']
AWS_SESSION_TOKEN=os.environ['AWS_SESSION_TOKEN']
AWS_REGION='us-west-2'
HOSTS=[{'host': 'search-serverl-elasti-krvvhs1lejpx-nq56g4vhirhbcjq8tticudbpfi.us-west-2.es.amazonaws.com', 'port': 443}]

handler = CMRESHandler( hosts=HOSTS,
                        auth_type=CMRESHandler.AuthType.AWS_SIGNED_AUTH,
                        aws_access_key=AWS_ACCESS_KEY_ID,
                        aws_secret_key=AWS_SECRET_ACCESS_KEY,
                        aws_session_token=AWS_SESSION_TOKEN,
                        aws_region=AWS_REGION,
                        use_ssl=True,
                        verify_ssl=True,
                        es_additional_fields={'App': 'TestApp', 'Environment': 'Dev'},
                        es_index_name="python_logger")

log = logging.getLogger("PythonTest")
log.setLevel(logging.INFO)
log.addHandler(handler)

logging.basicConfig(stream=sys.stdout, level=logging.DEBUG)

print("hello world")
log.debug("hello stdout world")
log.info("hello AWS world")

Using the handler in your program with refreshable AWS Credentials

To initialise and create the handler, just add the handler to your logger as follow

from cmreslogging.handlers import CMRESHandler
import logging
import os
import sys

service = 'es'
AWS_REGION='us-west-2'
credentials = Session().get_credentials()
HOSTS=[{'host': 'search-serverl-elasti-krvvhs1lejpx-nq56g4vhirhbcjq8tticudbpfi.us-west-2.es.amazonaws.com', 'port': 443}]

handler = CMRESHandler( hosts=HOSTS,
                        auth_type=CMRESHandler.AuthType.AWS_REFRESHABLE_CREDENTIALS,
                        aws_refreshable_credentials=credentials,
                        aws_region=AWS_REGION,
                        use_ssl=True,
                        verify_ssl=True,
                        es_additional_fields={'App': 'TestApp', 'Environment': 'Dev'},
                        es_index_name="python_logger")

log = logging.getLogger("PythonTest")
log.setLevel(logging.INFO)
log.addHandler(handler)

logging.basicConfig(stream=sys.stdout, level=logging.DEBUG)

print("hello world")
log.debug("hello stdout world")
log.info("hello AWS world")

Django Integration

It is also very easy to integrate the handler to Django And what is even better, at DEBUG level django logs information such as how long it takes for DB connections to return so they can be plotted on Kibana, or the SQL statements that Django executed.

from cmreslogging.handlers import CMRESHandler
LOGGING = {
    'version': 1,
    'disable_existing_loggers': False,
    'handlers': {
        'file': {
            'level': 'DEBUG',
            'class': 'logging.handlers.RotatingFileHandler',
            'filename': './debug.log',
            'maxBytes': 102400,
            'backupCount': 5,
        },
        'elasticsearch': {
            'level': 'DEBUG',
            'class': 'cmreslogging.handlers.CMRESHandler',
            'hosts': [{'host': 'localhost', 'port': 9200}],
            'es_index_name': 'my_python_app',
            'es_additional_fields': {'App': 'Test', 'Environment': 'Dev'},
            'auth_type': CMRESHandler.AuthType.NO_AUTH,
            'use_ssl': False,
        },
    },
    'loggers': {
        'django': {
            'handlers': ['file','elasticsearch'],
            'level': 'DEBUG',
            'propagate': True,
        },
    },
}

There is more information about how Django logging works in the Django documentation

Building the sources & Testing

To create the package follow the standard python setup.py to compile. To test, just execute the python tests within the test folder

Why using an appender rather than logstash or beats

In some cases is quite useful to provide all the information available within the LogRecords as it contains things such as exception information, the method, file, log line where the log was generated.

If you are interested on understanding more about the differences between the agent vs handler approach, I’d suggest reading this conversation thread

The same functionality can be implemented in many other different ways. For example, consider the integration using SysLogHandler and logstash syslog plugin.

Kibana Screenshot

Kibana screenshot

Contributing back

Feel free to use this as is or even better, feel free to fork and send your pull requests over.

Metadata

Release files for CMRESHandler2 2.0.8

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for CMRESHandler2 2.0.8
File Size Uploaded
CMRESHandler2-2.0.8.tar.gz 13.3 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for CMRESHandler2 2.0.8
File Interpreter ABI Platform
CMRESHandler2-2.0.8-py3-none-any.whl Python 3 none any Details

Total release size: 26.5 kB

Release files / CMRESHandler2-2.0.8.tar.gz

Download URL CMRESHandler2-2.0.8.tar.gz
Size 13.3 kB
Tags Source
SHA-256 checksum
How to use checksums
90d03e68f1351d4e553172a7a580ecbb9fa19f6df351c449478bb23849ba3a22
BLAKE2b-256 checksum
How to use checksums
45eb250947d14045c736e1622b7d40c4ce4d6bb3b15fa4a609a29b619eefe2a6
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/3.4.1 importlib_metadata/4.5.0 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.61.1 CPython/3.9.1

Release files / CMRESHandler2-2.0.8-py3-none-any.whl

Download URL CMRESHandler2-2.0.8-py3-none-any.whl
Size 13.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
6216fddb1fbc914f3fb5d69b1407e01f571cc98c72e17033fcab656b3978d3f0
BLAKE2b-256 checksum
How to use checksums
8ccfb27d3483f7621d21cb58c302394822ec3fd5d6ff2f1bc7c102f83b0187cc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/3.4.1 importlib_metadata/4.5.0 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.61.1 CPython/3.9.1

Release history Release notifications | RSS feed

This release

2.0.8 This release

2 release files

2.0.4

2 release files

2.0.3

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page