We run a fairly thorough internal asset management system and for performance and versatility reasons publish it via DNS TXT records - an idea ‘stolen’ from RBL. ie do a TXT lookup on ip.add.ress.assets.mgt returns a string containing hostname, then do a TXT record lookup on hostname.assets.mgt returns string containing OS, owner, hardware, etc
I have a nice pygelf-based script that we use to push data into graylog, and via this ‘RBL interface’ are able to associate intranet client hostnames, OS and users with intranet IP addresses. Really happy with that - works well
But this doesn’t help us for the syslog data, nor other GELF inputs that don’t come in via the pygelf script. So basically I want to move that functionality from the client to the server - ie have a ‘graylog-plugin-assets’ plugin for graylog server
The existing graylog-plugin-dnsresolver plugin is in the right ballpark - but I know ZERO java and cannot even figure out how to do a DNS call to pull back a TXT record (in java) - let along how to then extract strings and add new GELF fields with those values.
So I was wondering if there are some simple example plugins that someone like myself with nothing more than some scripting abilities could turn into this vision of loveliness I seek?
Thanks for any suggestions