Scan ALB Logs

This repository is a set of scritps and binaries that makes scanning AWS Application Load Balancer (ALB) logs stored in AWS S3 easier.

Installation

Installation requires you have a few utilities already available. Use homebrew to install them for macOS.

brew install coreutils jq go gunzip

Build the tools

Before using this tool build the tools:

make build

You must have ./bin and ./scripts on your $PATH. You can use direnv to do so or you can manage it manually.

Examples

Example with no date (uses current UTC date):

../scripts/scan-alb-logs bucket_name app-prod 403

Example for single code 504:

../scripts/scan-alb-logs bucket_name app-prod 504 2019/02/14,2019/02/16

Example with Pattern matching all 5XX codes:

 ../scripts/scan-alb-logs bucket_name app-prod "5" 2019/02/22

Example with Pattern matching all 5XX codes for a domain:

 ../scripts/scan-alb-logs bucket_name app-prod "5" 2019/02/22 example.com

License

This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and other third parties, it therefore is licensed under the MIT License. See LICENSE file for more information.

References

This code was originally developed as part of the Transcom Mymove repository. Original code and code history can be found in that repository.