page_title: Su-log-2014-01-13 page_touched: 20140121081801 old_text: ===Monday=== * laudit debugging * ldap-dev audit debugging

    Running Puppet in one-shot mode (environment: idg_stable201309)
    info: Retrieving plugin
    info: Loading facts in /var/lib/puppet/lib/facter/sufact.rb
    info: Caching catalog for laudit.stanford.edu
    info: Applying configuration version '1389658851'
    notice: /Stage[main]/S_splunk::Forwarder/S_splunk::Conf::Forwarder_app[su_idg]/S_splunk::Conf::App[/opt/splunkforwarder/etc/apps/su_idg_outputs]/S_splunk::Conf::App_file[/opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta]/File[/opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta]/content: 
    --- /opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta    2014-01-13 16:20:41.535719060 -0800
    +++ /tmp/puppet-file20140113-3050-ajq18a-0      2014-01-13 16:21:06.176723001 -0800
    @@ -1,3 +1,3 @@
     [outputs/tcpout%3Aprimary_indexers]
    -version = 6.0
    -modtime = 1389658841.526375000
    +version = 5.0.4
    +modtime = 1379020681.320521000

    notice: /Stage[main]/S_splunk::Forwarder/S_splunk::Conf::Forwarder_app[su_idg]/S_splunk::Conf::App[/opt/splunkforwarder/etc/apps/su_idg_outputs]/S_splunk::Conf::App_file[/opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta]/File[/opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta]/content: content changed '{md5}b6e76e6130cabc3c9b8258854d439824' to '{md5}4c2ecc50108000ecc8cb84b6c3879276'
    notice: /Stage[main]/S_splunk::Forwarder/S_splunk::Conf::Forwarder_app[su_idg]/S_splunk::Conf::App[/opt/splunkforwarder/etc/apps/su_idg_outputs]/S_splunk::Conf::App_file[/opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta]/File[/opt/splunkforwarder/etc/apps/su_idg_outputs/metadata/local.meta]/mode: mode changed '0600' to '0644'
    notice: Finished catalog run in 10.51 seconds
    laudit:/opt/splunkforwarder/etc/apps/su_idg_outputs# Shared connection to trainmaster closed.

===Wednesday=== * syslog base module debugging * posix acls in directory

===Thursday=== * more syslog module work * jira starter project for splunk

SUDailyLogs 293. row