mimecast / dtail Goto Github PK

Please support regex negation support like 'grep -v' of GNU grep.

There seems to be a bug when using a regex containing empty spaces.

E.g.

--regex "foo bar" does not match string foo bar, however --regex "foo.bar" does.

This might be a bug in DTail or an issue with the Golang regexp engine.

It would be great if dtail would print out less stuff by default. For example only print out connection statistics if a key is pressed. Many outputs can be changed from info to debug/verbose log level too.

DTail supports Linux ACLs. That however only works with reading files, not executing files. Example of a file which can not be executed via drun:

% sudo getfacl /usr/bin/sudo
# file: usr/bin/sudo
# owner: root
# group: root
# flags: s--
user::--x
group::--x
other::--x

Make it so that for the execution flag is checked to verify that the command can be executed or not.

Double check whether --silent produces "silent output" or not. But not too silent!

On Linux for file system ACL support Dtail requieres cgo for libacl inclusion. This may be an hindrance for compiling Dtail.

Proposal: By default compile without any cgo dependencies. ACL support has to be explicitly enabled via optional build flags.

It would be great if the dtail client could also write one outfile per server. At the moment dtail client only supports writing all output of all servers to one single file ./log/YYYYMMDD.log.

This could be enabled by a new command line switch. The outfiles could be named like ./log/YYYYMMDD-SERVERFQDN.log.

We have already good test coverage for mapreduce query language parsing. We need some tests actually executing queries.

The Golang regex engine is a bit limited. It would be good to add the following new behaviour to DTail:

1. The current way --regex "REGEX" stays as is.
2. Add a new "perl" style syntax, whereas !/ or / in the beginning of the regex identifies an extended DTail regex. As a start it could allow the !/ modifier (inverse regex) and the /imodifier (case insensitive). An example would be --regex "/REGEX1/i and !/REGEX2/ or /REGEX3/. This would allow to specify much more powerful patterns.

GoAWK is an Awk implementation purely written in Go. Licenses permit inclusion into Dtail. This will allow building a distributed Awk command. How to name? dawk? dgo awk? dtawk?

how can i use different user name for ssh? How can I set the username because my server only auth for some name