post-process/pretty-journal.py

#!/usr/bin/env python

r"""
BMC FFDC will at times include the journal in json format
(journalctl -o json-pretty ).  This is a quick and dirty script which
will convert that json output into the standard journalctl output
"""

import json
import re
import time
from argparse import ArgumentParser


def jpretty_to_python(buf):
    entries = []

    for entry in re.findall(
            '^{$(.+?)^}$', buf, re.DOTALL | re.MULTILINE):
        entries += [json.loads('{{{}}}'.format(entry))]

    return entries


if __name__ == '__main__':
    parser = ArgumentParser()
    parser.add_argument(
        'journalfile', metavar='FILE', help='the file to parse')

    args = parser.parse_args()

    with open(args.journalfile) as fd:
        entries = jpretty_to_python(fd.read())
        entries = sorted(entries, key=lambda k: k['__REALTIME_TIMESTAMP'])

        for e in entries:
            e['ts'] = time.ctime(
                float(e['__REALTIME_TIMESTAMP']) / 1000000).rstrip()
            try:
                print ('{ts} {_HOSTNAME} {SYSLOG_IDENTIFIER}: {MESSAGE}'.format(**e))
            except:
                print ("Unable to parse msg: " + str(e))
                continue