Running loganalysis.py against a V3 audit log

[Peter Schober]

* Wessel, Keith <kwessel at illinois.edu> [2015-11-04 22:12]:
> As we prepare to roll out V3, I've noticed that there are some
> subtle differences in the audit log formats between V2 and
> V3. Seems, for one, that the number of fields in the audit log have
> changed as have the message profile names enough that loganalysis.py
> no longer works on V3 audit logs. I've made some modifications to
> loganalysis.py that I think are correct, and I may ask here to
> confirm. Before I do, though, has anyone already contributed a
> modified version of loganalysis.py for parsing IDP V3 logs?

Obviously that script only knows about and references IDPv2, e.g. in
the comment at the beginning:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPLogging

I haven't migrated to v3 myself yet so haven't spent any time looking
at that script and what needed to be changed.
People still runnning v2 should either already have a working copy of
that repo, or will need to check out a specific revision (r374) still
working with the v2. I.e., I'm all in favor of updating trunk
to work with v3 defaults.
(I could either publish the code to a Github repo where people then can
send pull requests, or people just create issues w/ patches attached
in the Shib Jira.9
I don't expect to be looking at this within the next few weeks/months, though.
-peter