Script to parse journalctl json output
This was a quick script written by Brad that I find quite useful and
therefore good candidate for our openbmc tools repo.
It takes the "journalctl -o json-pretty -r" output which is collected
in a lot of BMC FFDC and formats it into the normal journalctl
output we're all used to. The json output is collected
because it contains all of the metadata, which is sometimes needed
for debug but it's very difficult to look at when trying to isolate
down to an issue.
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
diff --git a/post-process/pretty-journal.py b/post-process/pretty-journal.py
new file mode 100644
index 0000000..b6d519a
--- /dev/null
+++ b/post-process/pretty-journal.py
@@ -0,0 +1,41 @@
+#!/usr/bin/env python
+
+r"""
+BMC FFDC will at times include the journal in json format
+(journalctl -o json-pretty ). This is a quick and dirty script which
+will convert that json output into the standard journalctl output
+"""
+
+import json
+import re
+import time
+from argparse import ArgumentParser
+
+def jpretty_to_python(buf):
+ entries = []
+
+ for entry in re.findall(
+ '^{$(.+?)^}$', buf, re.DOTALL | re.MULTILINE):
+ entries += [ json.loads('{{{}}}'.format(entry)) ]
+
+ return entries
+
+if __name__ == '__main__':
+ parser = ArgumentParser()
+ parser.add_argument(
+ 'journalfile', metavar='FILE', help='the file to parse')
+
+ args = parser.parse_args()
+
+ with open(args.journalfile) as fd:
+ entries = jpretty_to_python(fd.read())
+ entries = sorted(entries, key=lambda k: k['__REALTIME_TIMESTAMP'])
+
+ for e in entries:
+ e['ts'] = time.ctime(float(e['__REALTIME_TIMESTAMP'])/1000000).rstrip()
+ try:
+ print '{ts} {_HOSTNAME} {SYSLOG_IDENTIFIER}: {MESSAGE}'.format(**e)
+ except:
+ print "Unable to parse msg: " + str(e)
+ continue
+