Skip to content

akamai/uls

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

88 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Akamai Unified Log Streamer (ULS)

Introduction

The Unified Log Streamer (ULS) is designed to simplify SIEM integrations for Akamai Secure Enterprise Access Products

Thanks to its modular design, ULS allows the connection of many SIEM solutions out-of-the-box.
ULS can send data into any SIEM that supports either file, TCP, UDP or HTTP ingestion.

ULS can be run directly as Python code, as a Docker container, through docker compose scripts or through helm within kubernetes.
Running ULS on Windows (python) is also supported (but not extensively tested, yet).

ULS docker compose usage

Table of contents

Key Features

Documentation

ULS can be operated in many ways.
Before setting up ULS, please understand your SIEM ingestion capabilities and configure an ingest method on your SIEM.
ULS is designed as an abstraction layer to easily ship log data to most SIEMs on the market. It does not create any dashboards / data extractions.
Anyway, details for some specific SIEM solutions can be found in this directory and in your SIEM documentation.

Generic Requirements

  • Python 3.9+ OR docker / docker-compose OR kubernetes / helm
  • AKAMAI .edgerc file (see further documentation here)
  • Outbound Internet access (Akamai API, Dockerhub OR Python repositories)
  • Compute resource footprint is minimal: 1 vCPU, 1 GB RAM, 500 MB free disk. See also High availability doc.
  • NTP synchronized time on the OS ULS will be executed.

Command Line Usage

ULS command line usage
Example commands:

# ETP - THREAT to console
python3.9 bin/uls.py --input etp --feed threat --output raw

# EAA - ACCESS to TCP
python3.9  bin/uls.py --input eaa --feed access --output tcp --host 10.99.10.99 --port 8081

For more information, please visit this document

Docker

ULS docker usage
For more information, please visit this document

Docker-compose

ULS docker compose usage
For more information, please visit this document

Kubernetes

img.png
For more information, please visit this document

Development

For the latest stable version of this software, please check the release section of the repo. The main branch will retain the stable versions. To ensure a continuous development of this tool, all new updates will first go into the development branch of this repo.
The development branch can be subject to change and could also represent a broken version of this software. In parallel, all new versions within the "main" branch will also be available on the ULS docker hub space.

Contributions to this software can be provided via Pull Requests and will get merged after successful review.

Changelog

Find a full Changelog of all added Features and fixed Bugs here:
ULS - Changelog

Support

Akamai ULS is provided "as-is". It is not supported by Akamai Support. Akamai is neither liable for the function nor for any caused problems that come along with the usage or caused by this tool. Please refer to the LICENSE document for more information.

To report an issue, feature request or bug, please open a new issue into the GitHub Issues page. This software is released under the "Apache License". Please read the frequently asked questions and visit the troubleshooting and debugging instructions before opening a ticket.

Pull requests to improve the code or enhance the functionality are welcome.

LINKS / REFERENCES

The ULS Project on GitHub
The ULS Project on Dockerhub