grunk 0.0.1

data/bin/grunk

@@ -0,0 +1,55 @@
+#!/usr/bin/env ruby
+require 'rubygems'
+require 'splunk'
+require 'getopt/std'
+
+options = Hash.new
+options[:time] = false
+options[:show_source] = false
+options[:max_results] = 30
+options[:earliest_time] = '-1d'
+options[:latest_time] = 'now'
+
+opt = Getopt::Std.getopts "sdom:f:t:"
+
+if opt["t"]
+  options[:latest_time] = opt["t"]
+end 
+
+if opt["f"]
+  options[:earliest_time] = opt["f"]
+end
+
+if opt["s"]
+  options[:show_source] = true
+end
+
+if opt["d"]
+  options[:time] = true
+end
+
+if opt["o"]
+  options[:show_host] = true
+end
+
+if opt["m"]
+  options[:max_results] = opt["m"].to_i
+end
+
+config = YAML.load_file "#{ENV['HOME']}/.grunkrc"
+
+splunk = Splunk::Splunk.new config['splunk_server'], config['splunk_user'] , config['splunk_pass']
+results = splunk.search "#{ARGV[0]}", 'sort_key' => 'time', 'sort_dir' => 'asc', 'count' => options[:max_results], 'earliest_time' => options[:earliest_time], 'latest_time' => options[:latest_time]
+results.reverse!
+results.each do |result|
+  print "#{result[:_time]}: " if options[:time]
+  if options[:show_host] || options[:show_source]
+    print "("
+    print result[:host] if options[:show_host]
+    print ":" if options[:show_host] && options[:show_source]
+    print result[:source] if options[:show_source]
+    print ") "
+  end
+    
+  puts result[:_raw]
+end

metadata

@@ -0,0 +1,59 @@
+--- !ruby/object:Gem::Specification
+name: grunk
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Andrew Beresford
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-04-24 00:00:00.000000000 +01:00
+default_executable: 
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ruby-splunk
+  requirement: &70166830835500 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.4
+  type: :runtime
+  prerelease: false
+  version_requirements: *70166830835500
+description: Command Line interface to Splunk API
+email: beezly@beez.ly
+executables:
+- grunk
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/grunk
+has_rdoc: true
+homepage: http://github.com/beezly/grunk
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.6.2
+signing_key: 
+specification_version: 3
+summary: Grep for Splunk
+test_files: []