Skip to main content

Log file slurper

Project description


.. image::

Slurp iterates over "entries" in log files (sources), parsed them into
something structured and passes them along to something else (sinks). A log
file is something that:

- is created
- has strings appended to it
- is then possibly deleted.

If a file does not conform to this lifestyle it is not suitable for use with

In the slurp world files are mapped to consumers which are python dictionaries

- what files are associated with the consumer
- how to identify raw "entry" strings in them
- how to parse those "entries" to something structured
- where to send those parsed entries

The motivating use-case for slurp is feeding entries streamed to centralized
syslog spool(s) to elastic search and other data mining tools.


- `Python <>`_ >= 2.5, < 3.0
- `pyinotify <>`_ >= 0.9.3
- `lockfile <>`_ >= 1.9
- `python-daemon <>`_ >= 1.5



$ pip install slurp

or if you prefer::

$ easy_install slurp


Slurp has both programming and command-line interfaces.

To use the programming interface import it and read doc strings::

$ python
>>> import slurp

To use the command-line interface run the slurp script::

$ slurp --help
slurp s|seed path-1 .. path-n [options]
slurp m|monitor path-1 .. path-n [options]
slurp e|eat path-1 .. path-n [options]

-h, --help show this help message and exit
-s STATE_PATH, --state-path=STATE_PATH
-l LOG_LEVEL, --log-level=LOG_LEVEL
-d, --daemonize

Another common use case is to run the slurp script as a monitor daemon. See
extras/slurp.init for an example init script.


Slurp does what it does using three functions: seed, eat and monitor. Seed is
used to initialize offset tracking information for files. These offsets tell
slurp where to resume eating from within the file. This is automatically done
by monitor.


Eat tells slurp to consume any newly added entries appended to tracked files.


Monitor sets up a watch on files and directories and consumes any newly added
entries appended in response to change events trigger by the watch. Slurp uses
pyinotify to watch.


Check it out::

$ cd ~/code
$ git checkout git://
$ cd slurp
$ mkvirtualenv slurp
(slurp)$ python develop

And run the example::

$ workon slurp
(slurp)$ cd ~/code/slurp/extras
(slurp)$ slurp eat access.log -c -l debug --disable-locking --disable-tracking

.. :changelog:


0.2 (2012-05-28)

* Hope you like it.

0.1 (2012-01-01)

* Its alive!

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for slurp, version 0.3
Filename, size File type Python version Upload date Hashes
Filename, size slurp-0.3.tar.gz (14.4 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page