Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
fluent-plugin-redis-store
Advanced tools
Fluentd output plugin to upload/publish event data to Redis storage.
This is folked project from fluent-plugin-redisstore.
Currently the plugin supports following Redis commands:
string
type (of the plugin)list
typeset
typezset
typepublish
typeRedis commands require key and value.
For key, the plugin supports either way;
Specify a fixed key.
You can do this simply using key
option in td-agent configuration file.
type redis_store
key userdata
Lookup a key string in every event data by a lookup path.
If event data have structured data like
{ "user": { "name": "Kei" } }
and you want to use each name of user, you can use key_path
option.
type redis_store
key_path user.name
With the above data, Kei
will be a key.
In addition, key_prefix
and key_suffix
are useful in some cases. Both are available either key
and key_path
type redis_store
key_path user.name
key_prefix ouruser.
key_suffix .accesslog
With the previous data, key will be outuser.Kei.accesslog
.
To determine what value in every event data to be srtored, you have two options;
value_path
option.key_path
.value_path
option.fluent-gem install fluent-plugin-redis-store
# or if you are using td-agent:
td-agent-gem install fluent-plugin-redis-store
Key | Type | Required? | Default | Description |
---|---|---|---|---|
host | string | Optional | 127.0.0.1 | host name of Redis server |
port | int | Optional | 6379 | port number of Redis server |
password | string | Optional | password for Redis connection | |
path | string | Optional | To connect via Unix socket, try '/tmp/redis.sock' | |
db | int | Optional | 0 | DB number of Redis |
timeout | float | Optional | 5.0 | connection timeout in seconds |
Key | Type | Default | Description |
---|---|---|---|
key | string | Fixed key used to store(publish) in Redis | |
key_path | string | path to lookup for key in the event data | |
key_prefix | string | prefix of key | |
key_suffix | string | suffix of key | |
value_path | string | (whole event data) | path to lookup for value in the event data |
store_type | string | zset | string /list /set /zset /publish |
format_type | string | plain | format type for value (plain /json /msgpack ) |
key_expire | int | -1 | If set, the key will be expired in specified seconds |
flush_interval | time | 1 | Time interval which events will be flushed to Redis |
Note: either key
or key_path
is required.
string
storage specific optionsKey | Type | Default | Description |
---|---|---|---|
type | string | Fixed key used to store(publish) in Redis | |
No more options than common options. |
list
storage specific optionsKey | Type | Default | Description |
---|---|---|---|
order | string | asc | asc : rpush, desc : lpush |
set
storage specific optionsNo more options than common options.
zset
storage specific optionsKey | Type | Default | Description |
---|---|---|---|
score_path | string | (time of log event) | path to lookup for score in the event data |
collision_policy | string | (nil) | Only update elements that already exist (XX) or add a new element (NX) |
value_expire | int | value expiration in seconds |
If value_expire
is set, the plugin assumes that the score in the SortedSet is
based on timestamp and it deletes expired members every after new event data arrives.
publish
storage specific optionsNo more options than common options.
moaikids
HANAI tohru
Mohit Khanna
yamada-shinji
Heitor de Souza
Hiroshi Hatake
Gabriel Bordeaux
Copyright (c) 2013 moaikids
Copyright (c) 2014 HANAI Tohru
Apache License, Version 2.0
FAQs
Unknown package
We found that fluent-plugin-redis-store demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.