log2timeline / plaso

Super timeline all the things
https://plaso.readthedocs.io
Apache License 2.0
1.71k stars 335 forks source link

Add support for Hadoop Yarn saved tasks files #2131

Open rgayon opened 6 years ago

rgayon commented 6 years ago

https://svn.apache.org/repos/asf/hadoop/common/branches/branch-0.23.7/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-api/src/main/proto/yarn_protos.proto

Hadoop saves tasks information in files : /hadoop/yarn/system/rmstore/FSRMStateRoot/RMAppRoot/application*/application*

These files have a timestamp corresponding to the last time this task was run, as well as a command and return states

aguilajesus commented 6 years ago

2029 is also related to hadoop yarn.