Tool for Distributed Extraction of Timestamped Events from Files

files, events, timestamps, extraction, distributed system

A tool for distributed extraction of timestamps from various files using extractors adapted from the Plaso engine to Apache Spark infrastructure. The files to extract are uploaded to distributed file-system HDFS and the extraction process is controlled by a Web service via its REST API. The tool is able to utilise efficiently a large distributed clusters.

https://github.com/nesfit/pyspark-plaso

Copyright 2019 Marek Rychly (rychly@fit.vutbr.cz) and Radek Burget (burgetr@fit.vutbr.cz)

Licensed under the Apache License, Version 2.0 (the "License"); you may not use these files except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

• pdf Programátorská dokumentace 1,017 kB
• pdf Instalační příručka 98 kB
• zip pyspark-plaso.zip 46 MB
• pdf Uživatelská příručka 101 kB