rpert/log_analysis
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial cross-server log inventory + anomaly scan

Browse Source 
- 10 hosts (mo1, ams, ams2, ro1, ca1, ca2, ca3, fr1, sony, termux)
- discover-logs.sh: portable inventory (Linux/FreeBSD/Termux)
- scan-anomalies.sh: ERROR/WARN/CRITICAL counts + journalctl + kubectl
- run-all.sh: parallel SSH fan-out
- build-summary.py: aggregates into reports/SUMMARY.md
- 5 HIGH-severity findings identified on ro1 (apache scanner traffic, mount_monitor warnings)
This commit is contained in:
rpert
2026-04-10 21:49:17 +00:00
parent cabf4c587f
commit e96a8b03fc
26 changed files with 1636 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

92
logs/inventory/ca1.csv Normal file
View File

@@ -0,0 +1,92 @@
"/var/log/alternatives.log",444,"2026-04-09 13:57:34","alternatives.log"
"/var/log/alternatives.log.1",13075,"2026-03-29 09:14:43","alternatives.log.1"
"/var/log/apport.log",0,"2025-12-20 04:08:10","apport.log"
"/var/log/apt/eipp.log.xz",44976,"2026-04-09 20:31:29","apt"
"/var/log/apt/history.log",4233,"2026-04-09 20:31:40","apt"
"/var/log/apt/history.log.1.gz",9089,"2026-03-31 06:47:12","apt"
"/var/log/apt/term.log",23109,"2026-04-09 20:31:40","apt"
"/var/log/apt/term.log.1.gz",26777,"2026-03-31 06:47:12","apt"
"/var/log/auth.log",1597500,"2026-04-10 21:46:08","auth.log"
"/var/log/auth.log.1",3503624,"2026-04-05 00:00:01","auth.log.1"
"/var/log/auth.log.2.gz",406281,"2026-03-29 00:00:01","auth.log.2.gz"
"/var/log/auth.log.3.gz",408056,"2026-03-22 00:00:01","auth.log.3.gz"
"/var/log/borg/backup-20260223.log",17687,"2026-02-23 03:13:53","borg"
"/var/log/borg/backup-20260224.log",4488,"2026-02-24 03:19:34","borg"
"/var/log/borg/backup-20260225.log",5558,"2026-02-25 03:06:02","borg"
"/var/log/borg/backup-20260226.log",5299,"2026-02-26 03:04:17","borg"
"/var/log/borg/backup-20260227.log",4831,"2026-02-27 03:14:48","borg"
"/var/log/borg/backup-20260228.log",3944,"2026-02-28 03:06:34","borg"
"/var/log/borg/backup-20260301.log",4249,"2026-03-01 03:14:17","borg"
"/var/log/borg/backup-20260302.log",4457,"2026-03-02 03:09:35","borg"
"/var/log/borg/backup-20260303.log",4284,"2026-03-03 03:26:37","borg"
"/var/log/borg/backup-20260304.log",4284,"2026-03-04 03:20:06","borg"
"/var/log/borg/backup-20260305.log",5314,"2026-03-05 03:16:48","borg"
"/var/log/borg/backup-20260306.log",142179,"2026-03-06 03:44:37","borg"
"/var/log/borg/backup-20260307.log",161491,"2026-03-07 19:01:42","borg"
"/var/log/borg/backup-20260308.log",4029,"2026-03-08 03:29:01","borg"
"/var/log/borg/backup-20260309.log",3128,"2026-03-09 03:16:46","borg"
"/var/log/borg/backup-20260310.log",3225,"2026-03-10 03:14:59","borg"
"/var/log/borg/backup-20260311.log",4354,"2026-03-11 03:16:30","borg"
"/var/log/borg/backup-20260312.log",4417,"2026-03-12 03:14:53","borg"
"/var/log/borg/backup-20260313.log",3735,"2026-03-13 03:12:33","borg"
"/var/log/borg/backup-20260314.log",4997,"2026-03-14 03:14:35","borg"
"/var/log/borg/backup-20260315.log",5159,"2026-03-15 03:01:02","borg"
"/var/log/borg/backup-20260316.log",4477,"2026-03-16 03:13:33","borg"
"/var/log/borg/backup-20260317.log",5176,"2026-03-17 03:04:05","borg"
"/var/log/borg/backup-20260318.log",5607,"2026-03-18 03:31:14","borg"
"/var/log/borg/backup-20260319.log",5814,"2026-03-19 03:04:23","borg"
"/var/log/borg/backup-20260320.log",5538,"2026-03-20 03:17:58","borg"
"/var/log/borg/backup-20260321.log",4998,"2026-03-21 03:24:34","borg"
"/var/log/borg/backup-20260322.log",4328,"2026-03-22 03:09:31","borg"
"/var/log/borg/backup-20260323.log",4344,"2026-03-23 03:04:32","borg"
"/var/log/borg/backup-20260324.log",5678,"2026-03-24 03:16:31","borg"
"/var/log/borg/backup-20260325.log",4255,"2026-03-25 03:04:17","borg"
"/var/log/borg/backup-20260326.log",5367,"2026-03-26 03:35:49","borg"
"/var/log/borg/backup-20260327.log",5237,"2026-03-27 03:25:07","borg"
"/var/log/borg/backup-20260328.log",5843,"2026-03-28 03:07:25","borg"
"/var/log/borg/backup-20260329.log",4255,"2026-03-29 03:01:46","borg"
"/var/log/borg/backup-20260330.log",6246,"2026-03-30 03:00:49","borg"
"/var/log/borg/backup-20260331.log",5719,"2026-03-31 03:28:05","borg"
"/var/log/borg/backup-20260401.log",5650,"2026-04-01 03:03:21","borg"
"/var/log/borg/backup-20260402.log",5392,"2026-04-02 03:27:44","borg"
"/var/log/borg/backup-20260403.log",5679,"2026-04-03 03:16:16","borg"
"/var/log/borg/backup-20260404.log",5921,"2026-04-04 03:05:48","borg"
"/var/log/borg/backup-20260405.log",4686,"2026-04-05 03:18:53","borg"
"/var/log/borg/backup-20260406.log",4598,"2026-04-06 03:25:11","borg"
"/var/log/borg/backup-20260407.log",5538,"2026-04-07 03:21:12","borg"
"/var/log/borg/backup-20260408.log",5026,"2026-04-08 03:05:46","borg"
"/var/log/borg/backup-20260409.log",4768,"2026-04-09 03:30:10","borg"
"/var/log/borg-backup.log",2684,"2026-03-07 03:25:01","borg-backup.log"
"/var/log/daemon.log",0,"2026-03-15 16:21:08","daemon.log"
"/var/log/dmesg",47086,"2026-04-02 21:55:41","dmesg"
"/var/log/dmesg.0",48781,"2026-03-17 17:18:56","dmesg.0"
"/var/log/dmesg.1.gz",15093,"2026-02-24 08:59:15","dmesg.1.gz"
"/var/log/dmesg.2.gz",14842,"2026-02-10 21:55:30","dmesg.2.gz"
"/var/log/docker-upgrades/upgrade-2026-02-22_0414.log",242285,"2026-02-22 04:17:38","docker-upgrades"
"/var/log/docker-upgrades/upgrade-2026-03-01_0425.log",316644,"2026-03-01 04:28:46","docker-upgrades"
"/var/log/docker-upgrades/upgrade-2026-03-08_0400.log",36720,"2026-03-08 04:02:14","docker-upgrades"
"/var/log/docker-upgrades/upgrade-2026-03-15_0419.log",43143,"2026-03-15 04:22:04","docker-upgrades"
"/var/log/dpkg.log",31480,"2026-04-09 20:31:40","dpkg.log"
"/var/log/dpkg.log.1",378135,"2026-03-31 06:47:12","dpkg.log.1"
"/var/log/fail2ban.log",275707,"2026-04-10 21:45:08","fail2ban.log"
"/var/log/fail2ban.log.1",120226,"2026-04-04 23:56:38","fail2ban.log.1"
"/var/log/fail2ban.log.2.gz",46502,"2026-03-28 23:41:13","fail2ban.log.2.gz"
"/var/log/fail2ban.log.3.gz",75922,"2026-03-21 23:59:40","fail2ban.log.3.gz"
"/var/log/kern.log",6312924,"2026-04-10 21:45:55","kern.log"
"/var/log/kern.log.1",7697163,"2026-04-04 23:59:51","kern.log.1"
"/var/log/kern.log.2.gz",869113,"2026-03-28 23:59:55","kern.log.2.gz"
"/var/log/kern.log.3.gz",786862,"2026-03-21 23:59:58","kern.log.3.gz"
"/var/log/landscape/sysinfo.log",0,"2024-05-29 10:04:47","landscape"
"/var/log/mail.log",1710695,"2026-04-10 21:39:19","mail.log"
"/var/log/mail.log.1",543852,"2026-04-04 23:36:15","mail.log.1"
"/var/log/mail.log.2.gz",104737,"2026-03-28 23:54:03","mail.log.2.gz"
"/var/log/mail.log.3.gz",166562,"2026-03-22 00:00:00","mail.log.3.gz"
"/var/log/syslog",9053418,"2026-04-10 21:46:08","syslog"
"/var/log/syslog.2.gz",1414079,"2026-03-29 00:00:01","syslog.2.gz"
"/var/log/syslog.3.gz",1301609,"2026-03-22 00:00:01","syslog.3.gz"
"/var/log/ubuntu-advantage-apt-hook.log",0,"2025-12-20 10:27:04","ubuntu-advantage-apt-hook.log"
"/var/log/ubuntu-advantage.log",0,"2026-01-01 00:00:24","ubuntu-advantage.log"
"/var/log/ufw.log",6312785,"2026-04-10 21:45:55","ufw.log"
"/var/log/ufw.log.1",7643908,"2026-04-04 23:59:51","ufw.log.1"
"/var/log/ufw.log.2.gz",868593,"2026-03-28 23:59:55","ufw.log.2.gz"
"/var/log/ufw.log.3.gz",853018,"2026-03-21 23:59:58","ufw.log.3.gz"
1 /var/log/alternatives.log 444 2026-04-09 13:57:34 alternatives.log
2 /var/log/alternatives.log.1 13075 2026-03-29 09:14:43 alternatives.log.1
3 /var/log/apport.log 0 2025-12-20 04:08:10 apport.log
4 /var/log/apt/eipp.log.xz 44976 2026-04-09 20:31:29 apt
5 /var/log/apt/history.log 4233 2026-04-09 20:31:40 apt
6 /var/log/apt/history.log.1.gz 9089 2026-03-31 06:47:12 apt
7 /var/log/apt/term.log 23109 2026-04-09 20:31:40 apt
8 /var/log/apt/term.log.1.gz 26777 2026-03-31 06:47:12 apt
9 /var/log/auth.log 1597500 2026-04-10 21:46:08 auth.log
10 /var/log/auth.log.1 3503624 2026-04-05 00:00:01 auth.log.1
11 /var/log/auth.log.2.gz 406281 2026-03-29 00:00:01 auth.log.2.gz
12 /var/log/auth.log.3.gz 408056 2026-03-22 00:00:01 auth.log.3.gz
13 /var/log/borg/backup-20260223.log 17687 2026-02-23 03:13:53 borg
14 /var/log/borg/backup-20260224.log 4488 2026-02-24 03:19:34 borg
15 /var/log/borg/backup-20260225.log 5558 2026-02-25 03:06:02 borg
16 /var/log/borg/backup-20260226.log 5299 2026-02-26 03:04:17 borg
17 /var/log/borg/backup-20260227.log 4831 2026-02-27 03:14:48 borg
18 /var/log/borg/backup-20260228.log 3944 2026-02-28 03:06:34 borg
19 /var/log/borg/backup-20260301.log 4249 2026-03-01 03:14:17 borg
20 /var/log/borg/backup-20260302.log 4457 2026-03-02 03:09:35 borg
21 /var/log/borg/backup-20260303.log 4284 2026-03-03 03:26:37 borg
22 /var/log/borg/backup-20260304.log 4284 2026-03-04 03:20:06 borg
23 /var/log/borg/backup-20260305.log 5314 2026-03-05 03:16:48 borg
24 /var/log/borg/backup-20260306.log 142179 2026-03-06 03:44:37 borg
25 /var/log/borg/backup-20260307.log 161491 2026-03-07 19:01:42 borg
26 /var/log/borg/backup-20260308.log 4029 2026-03-08 03:29:01 borg
27 /var/log/borg/backup-20260309.log 3128 2026-03-09 03:16:46 borg
28 /var/log/borg/backup-20260310.log 3225 2026-03-10 03:14:59 borg
29 /var/log/borg/backup-20260311.log 4354 2026-03-11 03:16:30 borg
30 /var/log/borg/backup-20260312.log 4417 2026-03-12 03:14:53 borg
31 /var/log/borg/backup-20260313.log 3735 2026-03-13 03:12:33 borg
32 /var/log/borg/backup-20260314.log 4997 2026-03-14 03:14:35 borg
33 /var/log/borg/backup-20260315.log 5159 2026-03-15 03:01:02 borg
34 /var/log/borg/backup-20260316.log 4477 2026-03-16 03:13:33 borg
35 /var/log/borg/backup-20260317.log 5176 2026-03-17 03:04:05 borg
36 /var/log/borg/backup-20260318.log 5607 2026-03-18 03:31:14 borg
37 /var/log/borg/backup-20260319.log 5814 2026-03-19 03:04:23 borg
38 /var/log/borg/backup-20260320.log 5538 2026-03-20 03:17:58 borg
39 /var/log/borg/backup-20260321.log 4998 2026-03-21 03:24:34 borg
40 /var/log/borg/backup-20260322.log 4328 2026-03-22 03:09:31 borg
41 /var/log/borg/backup-20260323.log 4344 2026-03-23 03:04:32 borg
42 /var/log/borg/backup-20260324.log 5678 2026-03-24 03:16:31 borg
43 /var/log/borg/backup-20260325.log 4255 2026-03-25 03:04:17 borg
44 /var/log/borg/backup-20260326.log 5367 2026-03-26 03:35:49 borg
45 /var/log/borg/backup-20260327.log 5237 2026-03-27 03:25:07 borg
46 /var/log/borg/backup-20260328.log 5843 2026-03-28 03:07:25 borg
47 /var/log/borg/backup-20260329.log 4255 2026-03-29 03:01:46 borg
48 /var/log/borg/backup-20260330.log 6246 2026-03-30 03:00:49 borg
49 /var/log/borg/backup-20260331.log 5719 2026-03-31 03:28:05 borg
50 /var/log/borg/backup-20260401.log 5650 2026-04-01 03:03:21 borg
51 /var/log/borg/backup-20260402.log 5392 2026-04-02 03:27:44 borg
52 /var/log/borg/backup-20260403.log 5679 2026-04-03 03:16:16 borg
53 /var/log/borg/backup-20260404.log 5921 2026-04-04 03:05:48 borg
54 /var/log/borg/backup-20260405.log 4686 2026-04-05 03:18:53 borg
55 /var/log/borg/backup-20260406.log 4598 2026-04-06 03:25:11 borg
56 /var/log/borg/backup-20260407.log 5538 2026-04-07 03:21:12 borg
57 /var/log/borg/backup-20260408.log 5026 2026-04-08 03:05:46 borg
58 /var/log/borg/backup-20260409.log 4768 2026-04-09 03:30:10 borg
59 /var/log/borg-backup.log 2684 2026-03-07 03:25:01 borg-backup.log
60 /var/log/daemon.log 0 2026-03-15 16:21:08 daemon.log
61 /var/log/dmesg 47086 2026-04-02 21:55:41 dmesg
62 /var/log/dmesg.0 48781 2026-03-17 17:18:56 dmesg.0
63 /var/log/dmesg.1.gz 15093 2026-02-24 08:59:15 dmesg.1.gz
64 /var/log/dmesg.2.gz 14842 2026-02-10 21:55:30 dmesg.2.gz
65 /var/log/docker-upgrades/upgrade-2026-02-22_0414.log 242285 2026-02-22 04:17:38 docker-upgrades
66 /var/log/docker-upgrades/upgrade-2026-03-01_0425.log 316644 2026-03-01 04:28:46 docker-upgrades
67 /var/log/docker-upgrades/upgrade-2026-03-08_0400.log 36720 2026-03-08 04:02:14 docker-upgrades
68 /var/log/docker-upgrades/upgrade-2026-03-15_0419.log 43143 2026-03-15 04:22:04 docker-upgrades
69 /var/log/dpkg.log 31480 2026-04-09 20:31:40 dpkg.log
70 /var/log/dpkg.log.1 378135 2026-03-31 06:47:12 dpkg.log.1
71 /var/log/fail2ban.log 275707 2026-04-10 21:45:08 fail2ban.log
72 /var/log/fail2ban.log.1 120226 2026-04-04 23:56:38 fail2ban.log.1
73 /var/log/fail2ban.log.2.gz 46502 2026-03-28 23:41:13 fail2ban.log.2.gz
74 /var/log/fail2ban.log.3.gz 75922 2026-03-21 23:59:40 fail2ban.log.3.gz
75 /var/log/kern.log 6312924 2026-04-10 21:45:55 kern.log
76 /var/log/kern.log.1 7697163 2026-04-04 23:59:51 kern.log.1
77 /var/log/kern.log.2.gz 869113 2026-03-28 23:59:55 kern.log.2.gz
78 /var/log/kern.log.3.gz 786862 2026-03-21 23:59:58 kern.log.3.gz
79 /var/log/landscape/sysinfo.log 0 2024-05-29 10:04:47 landscape
80 /var/log/mail.log 1710695 2026-04-10 21:39:19 mail.log
81 /var/log/mail.log.1 543852 2026-04-04 23:36:15 mail.log.1
82 /var/log/mail.log.2.gz 104737 2026-03-28 23:54:03 mail.log.2.gz
83 /var/log/mail.log.3.gz 166562 2026-03-22 00:00:00 mail.log.3.gz
84 /var/log/syslog 9053418 2026-04-10 21:46:08 syslog
85 /var/log/syslog.2.gz 1414079 2026-03-29 00:00:01 syslog.2.gz
86 /var/log/syslog.3.gz 1301609 2026-03-22 00:00:01 syslog.3.gz
87 /var/log/ubuntu-advantage-apt-hook.log 0 2025-12-20 10:27:04 ubuntu-advantage-apt-hook.log
88 /var/log/ubuntu-advantage.log 0 2026-01-01 00:00:24 ubuntu-advantage.log
89 /var/log/ufw.log 6312785 2026-04-10 21:45:55 ufw.log
90 /var/log/ufw.log.1 7643908 2026-04-04 23:59:51 ufw.log.1
91 /var/log/ufw.log.2.gz 868593 2026-03-28 23:59:55 ufw.log.2.gz
92 /var/log/ufw.log.3.gz 853018 2026-03-21 23:59:58 ufw.log.3.gz