fluent-plugin-ignore-filter 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 3d4cf2ef31feba7b2c627763e85a6cdf79c30638
+  data.tar.gz: 154bc489133878d9ce4a16670f63ca56c3c6a2cf
+SHA512:
+  metadata.gz: 23b1337498454df67d5a6df97e374bbae395289413440af6960d85b584d04c3acbef156965bb0587b74ad70d31cfaf7993080bc969a890701dbaed180cbc65a2
+  data.tar.gz: 54f946d0416d126bcdf7f98090a2a55882f4dd51ad0e4b8ee6212b636089543d7239c4f7ceaad926d6c2aecdda0a99e5d253c34bc17099007461efcc97704f00

data/.gitignore

@@ -0,0 +1,22 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp
+*.bundle
+*.so
+*.o
+*.a
+mkmf.log

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in fluent-plugin-ignore-filter.gemspec
+gemspec

data/LICENSE

@@ -0,0 +1,13 @@
+Copyright 2015 Yuri UMEZAKI
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

data/README.md

@@ -0,0 +1,123 @@
+# Fluent-plugin-ignore-filter
+
+[Fluentd](http://fluentd.org) filter plugin to ignore messages.
+
+
+## Installation
+
+```bash
+# for fluentd
+$ gem install fluent-plugin-ignore-filter
+
+# for td-agent2
+$ sudo td-agent-gem install fluent-plugin-ignore-filter
+```
+
+
+## Usage
+
+### Example 1:
+
+```xml
+<filter alert.messages.**>
+  @type ignore
+  regexp1 level info
+</filter>
+<filter alert.messages.**>
+  @type ignore
+  regexp1 server_name ^dev
+</filter>
+<filter alert.messages.**>
+  @type ignore
+  regexp1 level warning|warn
+  regexp2 ident kernel
+</filter>
+```
+
+Assuming following inputs are coming:
+
+```
+alert.messages: {"level":"info","ident":"kernel","server_name":"prod-web",message":"some info"}
+alert.messages: {"level":"warn","ident":"kernel","server_name":"prod-web","message":"failed to do something"}
+alert.messages: {"level":"error","ident":"kernel","server_name":"prod-web",message":"I/O error"}
+alert.messages: {"level":"warn","ident":"chronyd","server_name":"prod-web","message":"System clock wrong"}
+alert.messages: {"level":"error","ident":"sudo","server_name":"prod-web","message":"conversation failed"}
+alert.messages: {"level":"error","ident":"sudo","server_name":"dev-web","message":"conversation failed"}
+```
+
+then output bocomes as belows:
+
+```
+alert.messages: {"level":"error","ident":"kernel","server_name":"prod-web",message":"I/O error"}
+alert.messages: {"level":"warn","ident":"chronyd","server_name":"prod-web","message":"System clock wrong"}
+alert.messages: {"level":"error","ident":"sudo","server_name":"prod-web","message":"conversation failed"}
+```
+
+### Example 2:
+
+```xml
+<filter alert.messages.**>
+  @type ignore
+  regexp1 level info|notice
+  exclude1 ident crmd
+</filter>
+<filter alert.messages.**>
+  @type ignore
+  regexp1 level info|notice
+  regexp2 ident crmd
+  exclude1 message process_lrm_event
+</filter>
+```
+
+Assuming following inputs are coming:
+
+```
+alert.messages: {"level":"info","ident":"kernel","server_name":"prod-web",message":"some info"}
+alert.messages: {"level":"info","ident":"crmd","server_name":"prod-web","message":"process_lrm_event: Operation rundeck_monitor_0: not running"}
+alert.messages: {"level":"info","ident":"crmd","server_name":"prod-web","message":"Performing"}
+alert.messages: {"level":"warn","ident":"chronyd","server_name":"prod-web","message":"System clock wrong"}
+```
+
+then output bocomes as belows:
+
+```
+alert.messages: {"level":"info","ident":"crmd","server_name":"prod-web","message":"process_lrm_event: Operation rundeck_monitor_0: not running"}
+alert.messages: {"level":"warn","ident":"chronyd","server_name":"prod-web","message":"System clock wrong"}
+```
+
+
+## Parameters
+- regexp[1-20] *field\_key* *regexp*
+
+    The target field key and the ignoring regular expression.
+
+- exclude[1-20] *field_key* *regexp*
+
+    The target field key and the excluding regular expression.
+
+
+## TODO
+
+* patches welcome!
+
+
+## Contributing
+
+1. Fork it ( https://github.com/bungoume/fluent-plugin-ignore-filter/fork )
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create a new Pull Request
+
+
+## Copyright
+
+Copyright (c) 2015 Yuri Umezaki
+
+
+## Thanks to
+https://github.com/sonots/fluent-plugin-grep
+
+## License
+
+Apache License, Version 2.0

data/Rakefile

@@ -0,0 +1,2 @@
+require "bundler/gem_tasks"
+

data/fluent-plugin-ignore-filter.gemspec

@@ -0,0 +1,22 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+Gem::Specification.new do |spec|
+  spec.name          = "fluent-plugin-ignore-filter"
+  spec.version       = "0.0.1"
+  spec.authors       = ["Yuri Umezaki"]
+  spec.email         = ["bungoume@gmail.com"]
+  spec.homepage      = "https://github.com/bungoume/fluent-plugin-ignore-filter"
+  spec.summary       = "Fluentd filter plugin to ignore messages"
+  spec.description   = spec.summary
+  spec.license       = "APLv2"
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_runtime_dependency "fluentd", ">= 0.12"
+  spec.add_development_dependency "rake"
+end

data/lib/fluent/plugin/filter_ignore.rb

@@ -0,0 +1,63 @@
+module Fluent
+  class IgnoreFilter < Filter
+    Fluent::Plugin.register_filter('ignore', self)
+
+    REGEXP_MAX_NUM = 20
+
+    (1..REGEXP_MAX_NUM).each {|i| config_param :"regexp#{i}", :string, :default => nil }
+    (1..REGEXP_MAX_NUM).each {|i| config_param :"exclude#{i}", :string, :default => nil }
+
+    def configure(conf)
+      super
+
+      @regexps = []
+      (1..REGEXP_MAX_NUM).each do |i|
+        next unless conf["regexp#{i}"]
+        key, regexp = conf["regexp#{i}"].split(/ /, 2)
+        raise ConfigError, "regexp#{i} does not contain 2 parameters" unless regexp
+        @regexps.push({key: key, regexp: Regexp.compile(regexp)})
+      end
+
+      @excludes = []
+      (1..REGEXP_MAX_NUM).each do |i|
+        next unless conf["exclude#{i}"]
+        key, regexp = conf["exclude#{i}"].split(/ /, 2)
+        raise ConfigError, "exclude#{i} does not contain 2 parameters" unless regexp
+        @excludes.push({key: key, regexp: Regexp.compile(regexp)})
+      end
+    end
+
+    def filter(tag, time, record)
+      result = record
+      begin
+        catch(:break_loop) do
+          @regexps.each do |o|
+            throw :break_loop unless match(o[:regexp], record[o[:key]].to_s)
+          end
+          @excludes.each do |o|
+            throw :break_loop if match(o[:regexp], record[o[:key]].to_s)
+          end
+          result = nil
+        end
+      rescue => e
+        log.warn "failed to grep events", :error_class => e.class, :error => e.message
+        log.warn_backtrace
+      end
+      result
+    end
+
+    private
+
+    def match(regexp, string)
+      begin
+        return regexp.match(string.force_encoding('utf-8'))
+      rescue ArgumentError => e
+        raise e unless e.message.index("invalid byte sequence in".freeze).zero?
+        log.info "invalid byte sequence is replaced in `#{string}`"
+        string = string.scrub('?')
+        retry
+      end
+      return true
+    end
+  end if defined?(Filter) # Support only >= v0.12
+end

metadata

@@ -0,0 +1,79 @@
+--- !ruby/object:Gem::Specification
+name: fluent-plugin-ignore-filter
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Yuri Umezaki
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-07-12 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: fluentd
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.12'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.12'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Fluentd filter plugin to ignore messages
+email:
+- bungoume@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- fluent-plugin-ignore-filter.gemspec
+- lib/fluent/plugin/filter_ignore.rb
+homepage: https://github.com/bungoume/fluent-plugin-ignore-filter
+licenses:
+- APLv2
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.8
+signing_key: 
+specification_version: 4
+summary: Fluentd filter plugin to ignore messages
+test_files: []