Skip to content

Add Akvorado module - #437

Open
furest wants to merge 1 commit into
productionfrom
akvorado2
Open

Add Akvorado module#437
furest wants to merge 1 commit into
productionfrom
akvorado2

Conversation

@furest

@furest furest commented Mar 27, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@furest

furest commented Mar 27, 2026

Copy link
Copy Markdown
Contributor Author

Deprecating #394 because it includes changes that were not related to akvorado

@AlexanderMalmstrom

Copy link
Copy Markdown
Contributor

Maybe we should change all values here to 8760h (1 year)? Since currently we only save 15 days of raw flows. 15 days is still longer then the events so we should not end up with a bunch of more data, in theory we will only keep it for longer.

resolutions:
- interval: 0s
ttl: 360h0m0s
- interval: 1m0s
ttl: 168h0m0s
- interval: 5m0s
ttl: 2160h0m0s
- interval: 1h0m0s
ttl: 8640h0m0s

@SoundGoof

Copy link
Copy Markdown
Member

The Kafka storage formatting looks broken: format-kafka-storage uses refreshonly => true, but nothing notifies or subscribes to it, so it will never run on a fresh install. This should use an idempotent guard such as creates => '/var/log/kafka/meta.properties' and run before the Kafka service starts.

There are also undefined Python exceptions (NetworkTypeNotFoundError and NetworkNotFoundError), and the SNMP loops should probably use continue instead of return when a secret is missing.

The systemd unit should also avoid wrapping ExecStart in /bin/sh -c just to redirect output. That adds an unnecessary shell layer and can interfere with signal handling. For example:

ExecStart=/var/lib/kafka/bin/kafka-server-start.sh /var/lib/kafka/config/server.properties
StandardOutput=append:/var/log/kafka/kafka.log
StandardError=inherit

Alternatively, omit the output directives and let Kafka log directly to journald.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants