fluent-plugin-gelf 0.0.0.dev1 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: ddcfdea057fa3d07addf408f9ef0b5c7bce2ccb5
-  data.tar.gz: df303809d9e27e37b175551208db7691544937aa
+SHA256:
+  metadata.gz: 70a3623ed2adde0ca73a4f9b406657a50ba9cbb33ffbe5512fad9c9fb76591db
+  data.tar.gz: 6a7acdaa55e1088efbce002224c88c8795a84b5d1ac634f48dd2c5e063c3f4ad
 SHA512:
-  metadata.gz: 19fab390140723eb1161d7773d25f61b4a636aac8ebfd275a196cb76179b9d5eec4eddc66a4b987ff71c5cbe72ff34319f261ae03d64bf895ba76f033fbd49b7
-  data.tar.gz: 15a21def631cee1cfd924a6850d6bdaa969badc93a1e8607dae873c5f192cc0d4418deec9617d7d64a03cefb19107816dccdeafb9671352dcc513897d2e800a2
+  metadata.gz: 76b60605cf69b29427372dedf3792132a761410e23f7bf7f918290694e1eb06225f90f5263a6a54c08ca7bc52ab44a8cdbb0baa4cf34d31d685bb4ffc75f2e7f
+  data.tar.gz: 73742730f414d4643e12914c15cbdd61a4900ee50219b74538afe312ca74243a3a249cd77c26c63b2ec20aa1260e3297ca0f60b29e6cb873bddc0cede6ef8492

data/.circleci/config.yml

@@ -0,0 +1,76 @@
+version: 2.1
+commands:
+  install_gems:
+    steps:
+      - restore_cache:
+          key: fluent-plugin-gelf2-{{ checksum "fluent-plugin-gelf.gemspec" }}-{{ checksum "Gemfile" }}
+      - run: bundle check --path=vendor/bundle || bundle install --path=vendor/bundle --jobs=4 --retry=3 --full-index
+      - save_cache:
+          key: fluent-plugin-gelf2-{{ checksum "fluent-plugin-gelf.gemspec" }}-{{ checksum "Gemfile" }}
+          paths:
+            - vendor/bundle
+executors:
+  ruby:
+    parameters:
+      version:
+        type: string
+        default: latest
+    docker:
+      - image: circleci/ruby:<< parameters.version >>
+    working_directory: ~/fluent-plugin-gelf
+jobs:
+  publish:
+    executor: ruby
+    steps:
+      - checkout
+      - install_gems
+      - run:
+          name: Configure RubyGems API key
+          command: |
+            mkdir -p ~/.gem
+            echo ":rubygems_api_key: $RUBYGEMS_API_KEY" >  ~/.gem/credentials
+            chmod 0600 ~/.gem/credentials
+      - run:
+          name: Build gem
+          command: bundle exec rake build --trace
+      - run:
+          name: Release gem
+          command: bundle exec rake release:rubygem_push --trace
+  rubocop:
+    executor: ruby
+    steps:
+      - checkout
+      - install_gems
+      - run:
+          name: Run RuboCop
+          command: bundle exec rake rubocop --trace
+  test:
+    executor: ruby
+    steps:
+      - checkout
+      - install_gems
+      - run:
+          name: Run tests
+          command: bundle exec rake test --trace
+
+workflows:
+  test:
+    jobs:
+      - rubocop:
+          filters:
+            tags:
+              only: /.*/
+      - test:
+          filters:
+            tags:
+              only: /.*/
+      - publish:
+          context: org-rubygems
+          filters:
+            branches:
+              ignore: /.*/
+            tags:
+              only: /^v\d{1,2}\.\d{1,2}\.\d{1,2}.*/
+          requires:
+            - rubocop
+            - test

data/.gitignore

@@ -0,0 +1,2 @@
+Gemfile.lock
+pkg

data/.rubocop.yml

@@ -0,0 +1,12 @@
+AllCops:
+  TargetRubyVersion: 2.4
+Style/TrailingCommaInArguments:
+  EnforcedStyleForMultiline: comma
+Style/TrailingCommaInLiteral:
+  EnforcedStyleForMultiline: comma
+Metrics/LineLength:
+  Max: 120
+Style/StringLiterals:
+  EnforcedStyle: double_quotes
+Style/Documentation:
+  Enabled: false

data/.ruby-version

@@ -0,0 +1 @@
+2.4.2

data/Gemfile

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+gemspec

data/LICENSE

@@ -0,0 +1,29 @@
+BSD 3-Clause License
+
+Copyright (c) 2017, Funding Circle
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+   contributors may be used to endorse or promote products derived from
+   this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

data/README.md

@@ -0,0 +1,60 @@
+# fluent-plugin-gelf
+
+[![CircleCI](https://circleci.com/gh/FundingCircle/fluent-plugin-gelf/tree/master.svg?style=svg&circle-token=d781ef54862db51be146a2a2ad7aa9d783bb177a)](https://circleci.com/gh/FundingCircle/fluent-plugin-gelf/tree/master)
+
+A [fluentd](https://www.fluentd.org/) output plugin for sending log events to
+[Graylog](https://docs.graylog.org/).
+
+## Installation
+
+### RubyGems
+
+```
+$ gem install fluent-plugin-gelf
+```
+
+### Bundler
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem "fluent-plugin-gelf"
+```
+
+And then execute:
+
+```
+$ bundle
+```
+
+## Usage
+
+This `gelf` plugin is for fluentd v1.0 or later.
+
+```
+<match app.**>
+  output_data_type gelf
+</match>
+```
+
+## Configuration
+
+#### host (string) (required)
+
+The hostname of your Graylog cluster.
+
+####o port (integer) (optional)
+
+The TCP port of your Graylog cluster. Default value: `12201`.
+
+## Releases
+
+The CircleCI build for this project manages gem releases to RubyGems. To release
+a new version of this gem, create a tag for the version and push it. It will
+then be built and deployed automatically.
+
+## Copyright and License
+
+Copyright © 2017 Funding Circle Ltd.
+
+Licensed under the [BSD 3-Clause License](LICENSE).

data/Rakefile

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require "bundler"
+Bundler::GemHelper.install_tasks
+
+require "rake/testtask"
+require "rubocop/rake_task"
+
+Rake::TestTask.new(:test) do |t|
+  t.libs.push("lib", "test")
+  t.test_files = FileList["test/**/test_*.rb"]
+  t.verbose = true
+  t.warning = true
+end
+
+RuboCop::RakeTask.new(:rubocop)
+
+task default: %i[rubocop test]

data/fluent-plugin-gelf.gemspec

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+lib = File.expand_path("../lib", __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+Gem::Specification.new do |spec|
+  spec.name    = "fluent-plugin-gelf"
+  spec.version = "0.2.4"
+  spec.authors = ["Funding Circle"]
+  spec.email   = ["engineering+fluent-plugin-gelf@fundingcircle.com"]
+
+  spec.summary       = "Graylog output plugin for fluentd"
+  spec.description   = "Converts fluentd log events into GELF format and sends them to Graylog"
+  spec.license       = "BSD-3-Clause"
+
+  test_files, files  = `git ls-files -z`.split("\x0").partition do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+  spec.files         = files
+  spec.executables   = files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = test_files
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "oj", "~> 3.3.10"
+  spec.add_development_dependency "bundler", "~> 2.1.4"
+  spec.add_development_dependency "rake", ">= 12.3.3"
+  spec.add_development_dependency "test-unit", "~> 3.0"
+  spec.add_development_dependency "test-unit-rr", "~> 1.0.5"
+  spec.add_development_dependency "rubocop", "~> 0.50.0"
+  spec.add_runtime_dependency "fluentd", [">= 0.14.10", "< 2"]
+end

data/lib/fluent/plugin/formatter_gelf.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require "fluent/plugin/formatter"
+require "fluent/plugin/gelf_plugin_util"
+require "yajl"
+
+module Fluent
+  module Plugin
+    class GelfFormatter < Fluent::Plugin::Formatter
+      Fluent::Plugin.register_formatter("gelf", self)
+      include Fluent::GelfPluginUtil
+
+      def format(tag, time, record)
+        Yajl::Encoder.encode(make_gelfentry(tag, time, record))
+      end
+    end
+  end
+end

data/lib/fluent/plugin/gelf_plugin_util.rb

@@ -0,0 +1,114 @@
+# frozen_string_literal: true
+
+require "oj"
+require "date"
+
+module Fluent
+  module GelfPluginUtil
+    SYSLOG_FACILITY = {
+      "0" => "kern",
+      "1" => "user",
+      "2" => "mail",
+      "3" => "daemon",
+      "4" => "auth",
+      "5" => "syslog",
+      "6" => "lpr",
+      "7" => "news",
+      "8" => "uucp",
+      "9" => "cron",
+      "10" => "authpriv",
+      "16" => "local0",
+      "17" => "local1",
+      "18" => "local2",
+      "19" => "local3",
+      "20" => "local4",
+      "21" => "local5",
+      "22" => "local6",
+      "23" => "local7",
+    }.freeze
+
+    LEVEL_MAPPING = {
+      "error" => 3,
+      "warn" => 4,
+      "info" => 6,
+      "debug" => 7,
+    }.freeze
+
+    def merge_inner_json(record, key)
+      return record unless record[key]
+      json = Oj.load(record[key].strip)
+      return record unless json
+      json["host"] = record["host"] # preserve host
+      record.delete(key)
+      record.merge(json)
+    rescue Oj::ParseError
+      record
+    end
+
+    # rubocop:disable Metrics/AbcSize, Metrics/MethodLength, Metrics/PerceivedComplexity, Metrics/CyclomaticComplexity
+    def make_gelfentry(tag, time, record)
+      record = merge_inner_json(record, "message")
+      record = merge_inner_json(record, "log")
+      gelfentry = {}
+      gelfentry["timestamp"] = if defined?(Fluent::EventTime) && time.is_a?(Fluent::EventTime)
+                                 time.sec + (time.nsec.to_f / 1_000_000_000).round(3)
+                               else
+                                 time
+                               end
+
+      gelfentry["_fluentd_tag"] = tag
+
+      record.each_pair do |k, v| # rubocop:disable Metrics/BlockLength
+        case k
+        when "timestamp", "time"
+          gelfentry["timestamp"] = if v.is_a?(Integer) || v.is_a?(Float)
+                                     v
+                                   else
+                                     begin
+                                       (DateTime.parse(v).strftime("%Q").to_f / 1_000).round(3)
+                                     rescue ArgumentError
+                                       v
+                                     end
+                                   end
+        when "msec" then
+          if time.is_a?(Integer) && record["timestamp"].nil? && record["time"].nil?
+            gelfentry["timestamp"] = "#{time}.#{v}".to_f
+          else
+            gelfentry["_msec"] = v
+          end
+        when "level"
+          gelfentry["level"] = if v.is_a?(Integer)
+                                 v
+                               else
+                                 level = LEVEL_MAPPING.keys.find { |l| v.downcase =~ /#{l}/ }
+                                 level.nil? ? v : LEVEL_MAPPING[level]
+                               end
+        when "source_realtime_timestamp" then gelfentry["timestamp"] = (v.to_f / 1_000_000).round(3)
+        when "host", "hostname" then gelfentry["host"] = v.to_s
+        when "priority" then gelfentry["level"] = v.to_i
+        when "syslog_facility" then gelfentry["facility"] = SYSLOG_FACILITY[v]
+        when "short_message", "version", "full_message", "facility", "file", "line" then gelfentry[k] = v
+        else
+          k.to_s.start_with?("_") ? gelfentry[k] = v : gelfentry["_#{k}"] = v
+        end
+      end
+
+      if gelfentry["short_message"].nil? || gelfentry["short_message"].to_s.empty?
+        gelfentry["short_message"] = if gelfentry.key?("_message") && !gelfentry["_message"].to_s.empty?
+                                       gelfentry.delete("_message")
+                                     elsif gelfentry.key?("_log") && !gelfentry["_log"].to_s.empty?
+                                       gelfentry.delete("_log")
+                                     else
+                                       "(no message)"
+                                     end
+      end
+
+      if gelfentry["level"].nil?
+        level = LEVEL_MAPPING.keys.find { |k| tag.downcase =~ /\.#{k}/ }
+        gelfentry["level"] = level.nil? ? 6 : LEVEL_MAPPING[level]
+      end
+
+      gelfentry
+    end
+  end
+end

data/lib/fluent/plugin/out_gelf.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require "fluent/plugin/output"
+require "fluent/plugin/gelf_plugin_util"
+
+module Fluent
+  module Plugin
+    class GelfOutput < Fluent::Plugin::Output
+      Fluent::Plugin.register_output("gelf", self)
+
+      include Fluent::GelfPluginUtil
+
+      config_param :host, :string, default: nil
+      config_param :port, :integer, default: 12_201
+
+      def configure(conf)
+        super
+        raise ConfigError, "'host' parameter is required" unless conf.key?("host")
+      end
+
+      def start
+        super
+      end
+
+      def shutdown
+        super
+      end
+
+      def format(tag, time, record)
+        make_gelfentry(tag, time, record).to_msgpack
+      end
+
+      def write(chunk) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
+        records = []
+        chunk.msgpack_each do |record|
+          records.push JSON.dump(record) + "\0" # Message delimited by null char
+        end
+
+        log.debug "establishing connection with GrayLog"
+        socket = TCPSocket.new(@host, @port)
+
+        begin
+          log.debug "sending #{records.count} records in batch"
+          socket.write(records.join)
+        ensure
+          log.debug "closing connection with GrayLog"
+          socket.close
+        end
+      end
+
+      def formatted_to_msgpack_binary
+        true
+      end
+
+      def multi_workers_ready?
+        true
+      end
+    end
+  end
+end

data/test/fixtures/docker_futureproof.json

@@ -0,0 +1,32 @@
+{
+  "event": {
+    "tag": "docker.312fe8f61472",
+    "comment": "once msec set https://github.com/moby/moby/issues/17181",
+    "time": "2017-12-03 21:10:08.558Z UTC",
+    "record": {
+      "container_id": "312fe8f61472d866831525403681ff5d012352ca67b43c685a4d7b4efb60e60d",
+      "container_name": "/mesos-61cbfd86-74f0-428c-9515-2d36e74b2dc5",
+      "source": "stderr",
+      "log": "2017/12/04 11:02:06 http: TLS handshake error from 10.42.9.114:33880: EOF",
+      "mesos_framework": "marathon",
+      "app": "vault-gatekeeper-mesos",
+      "mesos_task_id": "vault-gatekeeper-mesos.e6848c5f-d5c1-11e7-a79a-02a64f45f7a2",
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "msec": "229"
+    }
+  },
+  "expected": {
+    "timestamp": 1512335408.558,
+    "_fluentd_tag": "docker.312fe8f61472",
+    "_container_id": "312fe8f61472d866831525403681ff5d012352ca67b43c685a4d7b4efb60e60d",
+    "_container_name": "/mesos-61cbfd86-74f0-428c-9515-2d36e74b2dc5",
+    "_source": "stderr",
+    "_mesos_framework": "marathon",
+    "_app": "vault-gatekeeper-mesos",
+    "_mesos_task_id": "vault-gatekeeper-mesos.e6848c5f-d5c1-11e7-a79a-02a64f45f7a2",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "_msec": "229",
+    "short_message": "2017/12/04 11:02:06 http: TLS handshake error from 10.42.9.114:33880: EOF",
+    "level": 6
+  }
+}

data/test/fixtures/docker_gelf_formatted.json

@@ -0,0 +1,45 @@
+{
+  "event": {
+    "tag": "docker.d14490734a2f",
+    "time": 15123853321,
+    "comment": "docker log already parsed by https://github.com/joshughes/fluent-plugin-mesosphere-filter (merge_json_log)",
+    "record": {
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+      "container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+      "source": "stdout",
+      "log": "{\"_request.status\":200,\"_request.method\":\"GET\",\"_request.path\":\"/\",\"_request.params\":{},\"_request.request_id\":\"d782a576-12db-4c7e-b8ab-a8bd06240786\",\"_request.request_ip\":\"10.42.8.20\",\"_request.user_agent\":\"spray-can/1.3.4\",\"_request.duration\":1,\"_type\":\"request\",\"_service.name\":\"my_app\",\"_service.version\":\"unknown.sha\",\"_tags\":\"d782a576-12db-4c7e-b8ab-a8bd06240786\",\"short_message\":\"GET / 200 in 1ms\",\"timestamp\":1512385332.824,\"host\":\"d14490734a2f\",\"level\":6,\"version\":\"1.1\"}",
+      "mesos_framework": "marathon",
+      "app": "loga",
+      "mesos_task_id": "loga.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+      "msec": "825"
+    }
+  },
+  "expected": {
+    "timestamp": 1512385332.824,
+    "_fluentd_tag": "docker.d14490734a2f",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "_container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+    "_container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+    "_source": "stdout",
+    "_mesos_framework": "marathon",
+    "_app": "loga",
+    "_mesos_task_id": "loga.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+    "_msec": "825",
+    "_request.status": 200,
+    "_request.method": "GET",
+    "_request.path": "/",
+    "_request.params": {},
+    "_request.request_id": "d782a576-12db-4c7e-b8ab-a8bd06240786",
+    "_request.request_ip": "10.42.8.20",
+    "_request.user_agent": "spray-can/1.3.4",
+    "_request.duration": 1,
+    "_type": "request",
+    "_service.name": "my_app",
+    "_service.version": "unknown.sha",
+    "_tags": "d782a576-12db-4c7e-b8ab-a8bd06240786",
+    "short_message": "GET / 200 in 1ms",
+    "level": 6,
+    "version": "1.1"
+  }
+}

data/test/fixtures/docker_gelf_formatted_already_extracted.json

@@ -0,0 +1,61 @@
+{
+  "event": {
+    "tag": "docker.d14490734a2f",
+    "time": 15123853321,
+    "comment": "docker log already parsed by https://github.com/joshughes/fluent-plugin-mesosphere-filter (merge_json_log)",
+    "record": {
+      "_request.status": 200,
+      "_request.method": "GET",
+      "_request.path": "/",
+      "_request.params": {},
+      "_request.request_id": "d782a576-12db-4c7e-b8ab-a8bd06240786",
+      "_request.request_ip": "10.42.8.20",
+      "_request.user_agent": "spray-can/1.3.4",
+      "_request.duration": 1,
+      "_type": "request",
+      "_service.name": "my_app",
+      "_service.version": "unknown.sha",
+      "_tags": "d782a576-12db-4c7e-b8ab-a8bd06240786",
+      "short_message": "GET / 200 in 1ms",
+      "timestamp": 1512385332.824,
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "level": 6,
+      "version": "1.1",
+      "container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+      "container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+      "source": "stdout",
+      "log": "{\"_request.status\":200,\"_request.method\":\"GET\",\"_request.path\":\"/\",\"_request.params\":{},\"_request.request_id\":\"d782a576-12db-4c7e-b8ab-a8bd06240786\",\"_request.request_ip\":\"10.42.8.20\",\"_request.user_agent\":\"spray-can/1.3.4\",\"_request.duration\":1,\"_type\":\"request\",\"_service.name\":\"my_app\",\"_service.version\":\"unknown.sha\",\"_tags\":\"d782a576-12db-4c7e-b8ab-a8bd06240786\",\"short_message\":\"GET / 200 in 1ms\",\"timestamp\":1512385332.824,\"host\":\"d14490734a2f\",\"level\":6,\"version\":\"1.1\"}",
+      "mesos_framework": "marathon",
+      "app": "loga",
+      "mesos_task_id": "loga.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+      "msec": "825"
+    }
+  },
+  "expected": {
+    "timestamp": 1512385332.824,
+    "_fluentd_tag": "docker.d14490734a2f",
+    "_request.status": 200,
+    "_request.method": "GET",
+    "_request.path": "/",
+    "_request.params": {},
+    "_request.request_id": "d782a576-12db-4c7e-b8ab-a8bd06240786",
+    "_request.request_ip": "10.42.8.20",
+    "_request.user_agent": "spray-can/1.3.4",
+    "_request.duration": 1,
+    "_type": "request",
+    "_service.name": "my_app",
+    "_service.version": "unknown.sha",
+    "_tags": "d782a576-12db-4c7e-b8ab-a8bd06240786",
+    "short_message": "GET / 200 in 1ms",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "level": 6,
+    "version": "1.1",
+    "_container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+    "_container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+    "_source": "stdout",
+    "_mesos_framework": "marathon",
+    "_app": "loga",
+    "_mesos_task_id": "loga.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+    "_msec": "825"
+  }
+}

data/test/fixtures/docker_inner_json.json

@@ -0,0 +1,32 @@
+{
+  "event": {
+    "tag": "docker.d14490734a2f",
+    "time": 15123853321,
+    "record": {
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+      "container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+      "source": "stdout",
+      "log": "{\"foo\":\"bar\",\"bar\":\"baz\"}",
+      "mesos_framework": "marathon",
+      "app": "other",
+      "mesos_task_id": "other.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+      "msec": "825"
+    }
+  },
+  "expected": {
+    "timestamp": 15123853321.825,
+    "_fluentd_tag": "docker.d14490734a2f",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "_container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+    "_container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+    "_source": "stdout",
+    "_mesos_framework": "marathon",
+    "_app": "other",
+    "_mesos_task_id": "other.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+    "_foo": "bar",
+    "_bar": "baz",
+    "short_message": "(no message)", 
+    "level": 6
+  }
+}

data/test/fixtures/docker_inner_json_with_time.json

@@ -0,0 +1,32 @@
+{
+  "event": {
+    "tag": "docker.d14490734a2f",
+    "time": 15123853321,
+    "record": {
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+      "container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+      "source": "stdout",
+      "log": "{\"message\":\"foo\",\"bar\":\"baz\",\"time\":\"2020-01-29T16:17:43Z\"}",
+      "mesos_framework": "marathon",
+      "app": "other",
+      "mesos_task_id": "other.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+      "msec": "825"
+    }
+  },
+  "expected": {
+    "timestamp": 1580314663.0,
+    "_fluentd_tag": "docker.d14490734a2f",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "_container_id": "d14490734a2f217609123a06e44df860ac573c76882a7a27e98c1a8e29d32664",
+    "_container_name": "/mesos-10d4a50f-e134-4538-b390-3051c50c431d",
+    "_source": "stdout",
+    "_mesos_framework": "marathon",
+    "_app": "other",
+    "_mesos_task_id": "other.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2",
+    "_msec": "825",
+    "_bar": "baz",
+    "short_message": "foo", 
+    "level": 6
+  }
+}

data/test/fixtures/docker_unformatted.json

@@ -0,0 +1,31 @@
+{
+  "event": {
+    "tag": "docker.312fe8f61472",
+    "comment": "no msec from docker: https://github.com/moby/moby/issues/17181#issuecomment-345594658",
+    "time": 1512424624,
+    "record": {
+      "container_id": "312fe8f61472d866831525403681ff5d012352ca67b43c685a4d7b4efb60e60d",
+      "container_name": "/mesos-61cbfd86-74f0-428c-9515-2d36e74b2dc5",
+      "source": "stderr",
+      "log": "2017/12/04 11:02:06 http: TLS handshake error from 10.42.9.114:33880: EOF",
+      "mesos_framework": "marathon",
+      "app": "vault-gatekeeper-mesos",
+      "mesos_task_id": "vault-gatekeeper-mesos.e6848c5f-d5c1-11e7-a79a-02a64f45f7a2",
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "msec": "229"
+    }
+  },
+  "expected": {
+    "timestamp": 1512424624.229,
+    "_fluentd_tag": "docker.312fe8f61472",
+    "_container_id": "312fe8f61472d866831525403681ff5d012352ca67b43c685a4d7b4efb60e60d",
+    "_container_name": "/mesos-61cbfd86-74f0-428c-9515-2d36e74b2dc5",
+    "_source": "stderr",
+    "_mesos_framework": "marathon",
+    "_app": "vault-gatekeeper-mesos",
+    "_mesos_task_id": "vault-gatekeeper-mesos.e6848c5f-d5c1-11e7-a79a-02a64f45f7a2",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "short_message": "2017/12/04 11:02:06 http: TLS handshake error from 10.42.9.114:33880: EOF",
+    "level": 6
+  }
+}

data/test/fixtures/level_from_tag.json

@@ -0,0 +1,23 @@
+{
+  "event": {
+    "tag": "fluent.warn",
+    "time": "2017-12-03 21:10:08.558Z UTC",
+    "record": {
+      "retry_time": 0,
+      "next_retry_seconds": "2017-12-04 22:56:27 +0000",
+      "chunk": "55f8ba0c48815f9a61ede8f6c2a68208",
+      "error": "#<Errno::ECONNREFUSED: Connection refused...",
+      "message": "failed to flush the buffer..."
+    }
+  },
+  "expected": {
+    "timestamp": 1512335408.558,
+    "_fluentd_tag": "fluent.warn",
+    "_retry_time": 0,
+    "_next_retry_seconds": "2017-12-04 22:56:27 +0000",
+    "_chunk": "55f8ba0c48815f9a61ede8f6c2a68208",
+    "_error": "#<Errno::ECONNREFUSED: Connection refused...",
+    "short_message": "failed to flush the buffer...",
+    "level": 4
+  }
+}

data/test/fixtures/message_json_parsable_to_nil.json

@@ -0,0 +1,50 @@
+{
+  "event": {
+    "tag": "journald.log",
+    "time": "2017-12-03 21:10:08.558Z UTC",
+    "record": {
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "transport": "stdout",
+      "priority": "6",
+      "syslog_facility": "3",
+      "systemd_slice": "system.slice",
+      "selinux_context": "system_u:system_r:init_t:s0",
+      "boot_id": "9b18b8b74048480aa9f6fc268c51a96d",
+      "machine_id": "d1f142097d497f24c021d7de9b81cab4",
+      "cap_effective": "0",
+      "syslog_identifier": "consul-start.sh",
+      "pid": "3388",
+      "uid": "997",
+      "gid": "994",
+      "comm": "consul",
+      "exe": "/usr/local/bin/consul",
+      "cmdline": "/usr/local/bin/consul agent -config-dir /usr/local/etc/consul -protocol 3 -bind 10.42.9.114 -datacenter eu-central-1 -retry-join provider=aws tag_key=Consul_environment tag_value=unstable -recursor localhost:53 -pid-file /run/consul/consul.pid -enable-script-checks -raft-protocol 2",
+      "systemd_cgroup": "/system.slice/consul.service",
+      "systemd_unit": "consul.service",
+      "message": " // Clearing the cache for the prod environment with debug false"
+    }
+  },
+  "expected": {
+    "timestamp": 1512335408.558,
+    "_fluentd_tag": "journald.log",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "_transport": "stdout",
+    "level": 6,
+    "facility": "daemon",
+    "_systemd_slice": "system.slice",
+    "_selinux_context": "system_u:system_r:init_t:s0",
+    "_boot_id": "9b18b8b74048480aa9f6fc268c51a96d",
+    "_machine_id": "d1f142097d497f24c021d7de9b81cab4",
+    "_cap_effective": "0",
+    "_syslog_identifier": "consul-start.sh",
+    "_pid": "3388",
+    "_uid": "997",
+    "_gid": "994",
+    "_comm": "consul",
+    "_exe": "/usr/local/bin/consul",
+    "_cmdline": "/usr/local/bin/consul agent -config-dir /usr/local/etc/consul -protocol 3 -bind 10.42.9.114 -datacenter eu-central-1 -retry-join provider=aws tag_key=Consul_environment tag_value=unstable -recursor localhost:53 -pid-file /run/consul/consul.pid -enable-script-checks -raft-protocol 2",
+    "_systemd_cgroup": "/system.slice/consul.service",
+    "_systemd_unit": "consul.service",
+    "short_message": " // Clearing the cache for the prod environment with debug false"
+  }
+}

data/test/fixtures/systemd.json

@@ -0,0 +1,50 @@
+{
+  "event": {
+    "tag": "journald.log",
+    "time": "2017-12-03 21:10:08.558Z UTC",
+    "record": {
+      "host": "mesosslave-private-06a58a3ce10a783cf",
+      "transport": "stdout",
+      "priority": "6",
+      "syslog_facility": "3",
+      "systemd_slice": "system.slice",
+      "selinux_context": "system_u:system_r:init_t:s0",
+      "boot_id": "9b18b8b74048480aa9f6fc268c51a96d",
+      "machine_id": "d1f142097d497f24c021d7de9b81cab4",
+      "cap_effective": "0",
+      "syslog_identifier": "consul-start.sh",
+      "pid": "3388",
+      "uid": "997",
+      "gid": "994",
+      "comm": "consul",
+      "exe": "/usr/local/bin/consul",
+      "cmdline": "/usr/local/bin/consul agent -config-dir /usr/local/etc/consul -protocol 3 -bind 10.42.9.114 -datacenter eu-central-1 -retry-join provider=aws tag_key=Consul_environment tag_value=unstable -recursor localhost:53 -pid-file /run/consul/consul.pid -enable-script-checks -raft-protocol 2",
+      "systemd_cgroup": "/system.slice/consul.service",
+      "systemd_unit": "consul.service",
+      "message": "2017/12/03 21:10:08 [INFO] agent: Synced check 'service:loga.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2_loga_7403'"
+    }
+  },
+  "expected": {
+    "timestamp": 1512335408.558,
+    "_fluentd_tag": "journald.log",
+    "host": "mesosslave-private-06a58a3ce10a783cf",
+    "_transport": "stdout",
+    "level": 6,
+    "facility": "daemon",
+    "_systemd_slice": "system.slice",
+    "_selinux_context": "system_u:system_r:init_t:s0",
+    "_boot_id": "9b18b8b74048480aa9f6fc268c51a96d",
+    "_machine_id": "d1f142097d497f24c021d7de9b81cab4",
+    "_cap_effective": "0",
+    "_syslog_identifier": "consul-start.sh",
+    "_pid": "3388",
+    "_uid": "997",
+    "_gid": "994",
+    "_comm": "consul",
+    "_exe": "/usr/local/bin/consul",
+    "_cmdline": "/usr/local/bin/consul agent -config-dir /usr/local/etc/consul -protocol 3 -bind 10.42.9.114 -datacenter eu-central-1 -retry-join provider=aws tag_key=Consul_environment tag_value=unstable -recursor localhost:53 -pid-file /run/consul/consul.pid -enable-script-checks -raft-protocol 2",
+    "_systemd_cgroup": "/system.slice/consul.service",
+    "_systemd_unit": "consul.service",
+    "short_message": "2017/12/03 21:10:08 [INFO] agent: Synced check 'service:loga.4b859ca4-d6e2-11e7-a79a-02a64f45f7a2_loga_7403'"
+  }
+}

data/test/fixtures/systemd_inner_json.json

@@ -0,0 +1,52 @@
+{
+  "event": {
+    "tag": "journald.log",
+    "time": "2018-01-09 15:16:47.693Z UTC",
+    "record": {
+      "host": "mesosslave-private-0690bffd1e39d7462",
+      "transport": "stdout",
+      "priority": "6",
+      "syslog_facility": "3",
+      "systemd_slice": "system.slice",
+      "selinux_context": "system_u:system_r:container_runtime_t:s0",
+      "boot_id": "a83a6f2a9aa545d18188387fcff0dea9",
+      "machine_id": "f073c429a7456b53ec3e2c53460c5c8f",
+      "cap_effective": "1fffffffff",
+      "syslog_identifier": "kafka-connect-server-kafka-connect-clj",
+      "pid": "1158",
+      "uid": "0",
+      "gid": "0",
+      "comm": "dockerd",
+      "exe": "/usr/bin/dockerd",
+      "cmdline": "/usr/bin/dockerd --exec-opt native.cgroupdriver=cgroupfs --log-opt tag=docker.{{.ID}} --log-opt fluentd-address=unix:///var/run/td-agent/td-agent.sock --log-driver=fluentd --log-opt fluentd-async-connect=true --dns=10.42.8.190",
+      "systemd_cgroup": "/system.slice/docker.service",
+      "systemd_unit": "docker.service",
+      "message": "{\"timestamp\":\"2018-01-09T15:16:47.692+00:00\",\"logger\":\"kafka.connect.SinkTask\",\"level\":\"DEBUG\",\"thread\":\"pool-1-thread-30\",\"message\":\"put 0 records to sink\"}"
+    }
+  },
+  "expected": {
+    "timestamp": 1515511007.692,
+    "_fluentd_tag": "journald.log",
+    "host": "mesosslave-private-0690bffd1e39d7462",
+    "_transport": "stdout",
+    "level": 7,
+    "facility": "daemon",
+    "_systemd_slice": "system.slice",
+    "_selinux_context": "system_u:system_r:container_runtime_t:s0",
+    "_boot_id": "a83a6f2a9aa545d18188387fcff0dea9",
+    "_machine_id": "f073c429a7456b53ec3e2c53460c5c8f",
+    "_cap_effective": "1fffffffff",
+    "_syslog_identifier": "kafka-connect-server-kafka-connect-clj",
+    "_pid": "1158",
+    "_uid": "0",
+    "_gid": "0",
+    "_comm": "dockerd",
+    "_exe": "/usr/bin/dockerd",
+    "_cmdline": "/usr/bin/dockerd --exec-opt native.cgroupdriver=cgroupfs --log-opt tag=docker.{{.ID}} --log-opt fluentd-address=unix:///var/run/td-agent/td-agent.sock --log-driver=fluentd --log-opt fluentd-async-connect=true --dns=10.42.8.190",
+    "_systemd_cgroup": "/system.slice/docker.service",
+    "_systemd_unit": "docker.service",
+    "_logger": "kafka.connect.SinkTask",
+    "_thread": "pool-1-thread-30",
+    "short_message": "put 0 records to sink"
+  }
+}

data/test/fixtures/systemd_with_real_timestamp.json

@@ -0,0 +1,53 @@
+{
+  "event": {
+    "tag": "journald.log",
+    "time": "2017-12-03 21:10:08.558Z UTC",
+    "record": {
+      "uid": "0",
+      "gid": "0",
+      "cap_effective": "1fffffffff",
+      "systemd_slice": "system.slice",
+      "boot_id": "652998235194436283ff15d225e268cf",
+      "machine_id": "d1f142097d497f24c021d7de9b81cab4",
+      "hostname": "mesosslave-private-015e1a3477fa81e5e",
+      "transport": "syslog",
+      "priority": "3",
+      "syslog_facility": "1",
+      "syslog_identifier": "mesos-slave",
+      "syslog_pid": "3445",
+      "pid": "3596",
+      "comm": "logger",
+      "exe": "/usr/bin/logger",
+      "cmdline": "logger -p user.err -t mesos-slave[3445]",
+      "systemd_cgroup": "/system.slice/mesos-slave.service",
+      "systemd_unit": "mesos-slave.service",
+      "selinux_context": "system_u:system_r:unconfined_service_t:s0",
+      "message": "I1204 10:25:20.448935  3677 slave.cpp:5920] Current disk usage 5.31%. Max allowed age: 4.234456934750000mins",
+      "source_realtime_timestamp": "1512383120449042"
+    }
+  },
+  "expected": {
+    "timestamp": 1512383120.449,
+    "_fluentd_tag": "journald.log",
+    "_uid": "0",
+    "_gid": "0",
+    "_cap_effective": "1fffffffff",
+    "_systemd_slice": "system.slice",
+    "_boot_id": "652998235194436283ff15d225e268cf",
+    "_machine_id": "d1f142097d497f24c021d7de9b81cab4",
+    "host": "mesosslave-private-015e1a3477fa81e5e",
+    "_transport": "syslog",
+    "level": 3,
+    "facility": "user",
+    "_syslog_identifier": "mesos-slave",
+    "_syslog_pid": "3445",
+    "_pid": "3596",
+    "_comm": "logger",
+    "_exe": "/usr/bin/logger",
+    "_cmdline": "logger -p user.err -t mesos-slave[3445]",
+    "_systemd_cgroup": "/system.slice/mesos-slave.service",
+    "_systemd_unit": "mesos-slave.service",
+    "_selinux_context": "system_u:system_r:unconfined_service_t:s0",
+    "short_message": "I1204 10:25:20.448935  3677 slave.cpp:5920] Current disk usage 5.31%. Max allowed age: 4.234456934750000mins"
+  }
+}

data/test/helper.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+$LOAD_PATH.unshift(File.expand_path("../../", __FILE__))
+require "test-unit"
+require "fluent/test"
+require "fluent/test/driver/output"
+require "fluent/test/driver/formatter"
+require "fluent/test/helpers"
+
+Test::Unit::TestCase.include(Fluent::Test::Helpers)
+Test::Unit::TestCase.extend(Fluent::Test::Helpers)
+
+def fixtures
+  path = File.expand_path("../fixtures", __FILE__)
+  all_fixture_files = Dir["#{path}/*.json"]
+  all_fixtures = {}
+  all_fixture_files.each do |file|
+    all_fixtures[File.basename(file)] = JSON.parse(File.read(file))
+  end
+  all_fixtures
+end

data/test/plugin/test_formatter_gelf.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require "helper"
+require "fluent/plugin/formatter_gelf.rb"
+
+class GelfFormatterTest < Test::Unit::TestCase
+  setup do
+    Fluent::Test.setup
+    @d = create_driver("")
+  end
+
+  private
+
+  def create_driver(conf)
+    Fluent::Test::Driver::Formatter.new(Fluent::Plugin::GelfFormatter).configure(conf)
+  end
+
+  fixtures.each_pair do |file, v|
+    test "format #{file}" do
+      time = v["event"]["time"]
+      parsed_time = time.is_a?(Integer) ? time : event_time(time)
+      formatted = @d.instance.format(v["event"]["tag"], parsed_time, v["event"]["record"])
+      assert_equal v["expected"].to_json, formatted
+    end
+  end
+end

data/test/plugin/test_out_gelf.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+require "helper"
+require "fluent/plugin/out_gelf.rb"
+require "test/unit/rr"
+
+class GelfOutputTest < Test::Unit::TestCase
+  CONFIG = %(
+    host localhost
+  )
+
+  MULTI_RECORD_WRITE = "{\"timestamp\":1512335408.558,\"_fluentd_tag\":\"test\",\
+\"_foo\":\"bar\",\"short_message\":\"(no message)\",\"level\":6}\u0000{\"timestamp\":1512335409.123,\
+\"_fluentd_tag\":\"test\",\"_bar\":\"baz\",\"short_message\":\"(no message)\",\"level\":6}\u0000"
+
+  setup do
+    Fluent::Test.setup
+    @d = create_driver(CONFIG)
+    @stubbed_tcp = Object.new
+  end
+
+  private
+
+  def create_driver(conf)
+    Fluent::Test::Driver::Output.new(Fluent::Plugin::GelfOutput).configure(conf)
+  end
+
+  test "test config" do
+    assert_equal "localhost", @d.instance.host
+    assert_equal 12_201, @d.instance.port
+  end
+
+  test "write of multiple records chunk" do
+    mock(TCPSocket).new(@d.instance.host, @d.instance.port) { @stubbed_tcp }
+    mock(@stubbed_tcp).write(MULTI_RECORD_WRITE)
+    mock(@stubbed_tcp).close
+    @d.run(default_tag: "test") do
+      @d.feed(event_time("2017-12-03 21:10:08.558Z UTC"), "foo": "bar")
+      @d.feed(event_time("2017-12-03 21:10:09.123Z UTC"), "bar": "baz")
+    end
+  end
+
+  fixtures.each_pair do |file, v|
+    test "format #{file}" do
+      stub(TCPSocket).new { @stubbed_tcp }
+      stub(@stubbed_tcp).write
+      stub(@stubbed_tcp).close
+      @d.run(default_tag: v["event"]["tag"]) do
+        time = v["event"]["time"]
+        parsed_time = time.is_a?(Integer) ? time : event_time(time)
+        @d.feed(parsed_time, v["event"]["record"])
+      end
+      assert_equal [v["expected"].to_msgpack], @d.formatted
+    end
+  end
+end

metadata

@@ -1,43 +1,57 @@
 --- !ruby/object:Gem::Specification
 name: fluent-plugin-gelf
 version: !ruby/object:Gem::Version
-  version: 0.0.0.dev1
+  version: 0.2.4
 platform: ruby
 authors:
-- Funding Circle Engineering
+- Funding Circle
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-12-05 00:00:00.000000000 Z
+date: 2020-05-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: bundler
+  name: oj
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.14'
+        version: 3.3.10
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.14'
+        version: 3.3.10
 - !ruby/object:Gem::Dependency
-  name: rake
+  name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '12.0'
+        version: 2.1.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '12.0'
+        version: 2.1.4
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 12.3.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 12.3.3
 - !ruby/object:Gem::Dependency
   name: test-unit
   requirement: !ruby/object:Gem::Requirement
@@ -100,13 +114,39 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '2'
-description: Convers fluentd log events into GELF format
+description: Converts fluentd log events into GELF format and sends them to Graylog
 email:
 - engineering+fluent-plugin-gelf@fundingcircle.com
 executables: []
 extensions: []
 extra_rdoc_files: []
-files: []
+files:
+- ".circleci/config.yml"
+- ".gitignore"
+- ".rubocop.yml"
+- ".ruby-version"
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- fluent-plugin-gelf.gemspec
+- lib/fluent/plugin/formatter_gelf.rb
+- lib/fluent/plugin/gelf_plugin_util.rb
+- lib/fluent/plugin/out_gelf.rb
+- test/fixtures/docker_futureproof.json
+- test/fixtures/docker_gelf_formatted.json
+- test/fixtures/docker_gelf_formatted_already_extracted.json
+- test/fixtures/docker_inner_json.json
+- test/fixtures/docker_inner_json_with_time.json
+- test/fixtures/docker_unformatted.json
+- test/fixtures/level_from_tag.json
+- test/fixtures/message_json_parsable_to_nil.json
+- test/fixtures/systemd.json
+- test/fixtures/systemd_inner_json.json
+- test/fixtures/systemd_with_real_timestamp.json
+- test/helper.rb
+- test/plugin/test_formatter_gelf.rb
+- test/plugin/test_out_gelf.rb
 homepage: 
 licenses:
 - BSD-3-Clause
@@ -122,13 +162,26 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.14
+rubygems_version: 3.0.3
 signing_key: 
 specification_version: 4
-summary: GELF output plugin for Fluentd
-test_files: []
+summary: Graylog output plugin for fluentd
+test_files:
+- test/fixtures/docker_futureproof.json
+- test/fixtures/docker_gelf_formatted.json
+- test/fixtures/docker_gelf_formatted_already_extracted.json
+- test/fixtures/docker_inner_json.json
+- test/fixtures/docker_inner_json_with_time.json
+- test/fixtures/docker_unformatted.json
+- test/fixtures/level_from_tag.json
+- test/fixtures/message_json_parsable_to_nil.json
+- test/fixtures/systemd.json
+- test/fixtures/systemd_inner_json.json
+- test/fixtures/systemd_with_real_timestamp.json
+- test/helper.rb
+- test/plugin/test_formatter_gelf.rb
+- test/plugin/test_out_gelf.rb