We ❤️ syslogs: Real-time syslog Processing with Apache Kafka and KSQL—Part 2: Event-Driven Alerting with Slack
Apr 13, 2018Robin Moffatt

Summary
This post details how to use the Confluent Kafka Python client and KSQL to build an event-driven alerting system. It demonstrates filtering syslog data in real-time with KSQL to identify suspicious login attempts and then using a Python script to consume these filtered events from Kafka and send push notifications to Slack. The post covers installing the Slack and Confluent Kafka Python clients, consuming messages from Kafka, and integrating the two to send Slack notifications based on Kafka topic messages.