Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
fluent-plugin-sentry-ex
Advanced tools
fluent-plugin-sentry is a fluentd output plugin that sends aggregated errors/exception events to Sentry. Sentry is a event logging and aggregation platform.
Sentry alone does not buffer incoming requests, so if your Sentry instance is under load, Sentry can respond with a 503 Service Unavailable.
fluent-plugin-sentry extends fluent buffered output and enables a fluend user to buffer and flush messages to Sentry with reliable delivery.
(quoted from http://blog.getsentry.com/)
install with gem
or td-agent provided command as:
# for fluentd
$ gem install fluent-plugin-sentry
# for td-agent
$ sudo /usr/lib64/fluent/ruby/bin/fluent-gem install fluent-plugin-sentry
# for td-agent2
$ sudo td-agent-gem install fluent-plugin-sentry
create sentry dashboard first. It could start with cost free!!
OR
<source>
@type forward
</source>
<match notify.**>
@type sentry
# Set endpoint API URL
endpoint_url https://API_KEY:API_PASSWORD@app.getsentry.com/PROJECT_ID
# Set default events value of 'server_name'
# To set short hostname, set like below.
hostname_command hostname -s
# rewrite shown tag name for Sentry dashboard
remove_tag_prefix notify.
</match>
endpoint_url (Required)
Set endpoint API URL which shows at Sentry dashboard. (it is not sentry account information)
default_level
[default] error
defalut_logger
[default] flunetd
hostname_command
[default] hostname
Set default frontend value of 'server_name'
flush_interval
[default] 0sec
It also support rewriting Tag with SetTagKeyMixin.
Pull requests are very welcome!!
Copyright © 2014- Kentaro Yoshida (@yoshi_ken)
Apache License, Version 2.0
FAQs
Unknown package
We found that fluent-plugin-sentry-ex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.