fluent-plugin-site24x7 0.1.7 → 0.1.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0b5f4e324f1115eea47583eb6dbc1467394841aadf376f08af4b07e6b0618578
-  data.tar.gz: '08f30541235f4294db3a0546c5de0ee24d46cb0e68d76ecb96f3199175362844'
+  metadata.gz: a1b8cf65db3d72b0f868f17783d552cb0139865f90b46fda5f785e25c46fb006
+  data.tar.gz: 0e1d311f59df96e5490798243577e4d970fbccfb074c0c7126e19c344dfebf26
 SHA512:
-  metadata.gz: 8b47d505b63ae3bca0f033678cb01932d02732e2eecaab9d6c84f88765772daeddbe6380538d85c669cf5565df7378a63ba893e7408de704b8656d2794f77e10
-  data.tar.gz: 357ecae7bc8d57752cb0e66c94d9d3f69645eaf0258340909903759b00deaf8711c0de5aa1e10a17ca6c785dcc2a005f942f3fa40f460b958120823df34f9f4c
+  metadata.gz: 384d2bfd8adad89a587557ceead314160c4fca185b447fb1bd39f41f79b275c1f4a3c5628d1ffd2fded32135595583aa6e99a2f42e527b16391f9330848fb0f6
+  data.tar.gz: f8045692f66faa2128aa344c8bbfbe88591e49c60cedbeb47a10f41a5d7ead43d23e52ec3f62be9f543bc4d5dcb0eddb57dc694c18e1d55462f6e1e0e1cb726d

data/README.md

@@ -57,13 +57,23 @@ As fluent-plugin-site24x7 is an output_buffer, you can set all the output_buffer
 Property | Description | Default Value
 ------------ | -------------|------------
 log_type_config | log_type_config of your configured log type in site24x7 | nil
-max_retry | Number of times to resend failed uploads | 3
+max_retry | Number of times to resend failed uploads. Set to -1 for unlimited retries | -1
 retry_interval |  Time interval to sleep initially between retries, exponential step-off | 2 seconds
+maxretry_interval | Maximum interval to wait between sending retries | 60 seconds
+retry_timeout | Time after which the data is going to be dropped | 24 hours
 http_idle_timeout | Timeout (in seconds) for which http persistent connection will stay open without traffic | 5 seconds
 http_read_timeout | Timeout (in seconds) when the socket connects until the connection breaks | 30 secods
 http_proxy | Your proxy uri | nil
+skip_ssl_verify | When true, disables TLS certificate verification of the upload endpoint. **Not recommended** (exposes the API key and log data to on-path attackers); leave false unless you terminate TLS at a trusted proxy with a private CA | false
 
 ## Release Notes
+* 0.1.9 - Security: TLS certificate verification enabled by default (VERIFY_PEER); added skip_ssl_verify opt-out
+* 0.1.8 - Widen net-http-persistent constraint for Ruby 3.x
+* 0.1.7 - Sending stop signal to Fluentd for unrecoverable errors
+* 0.1.6 - chunk unique id added for each upload and unlimited retry support
+* 0.1.5 - Retry handled for empty upload-id
+* 0.1.4 - Multi-line log, masking, hasing and derived fields support added
+* 0.1.3 - JSON log parsing issue fixed
 * 0.1.2 - Timezone parsing issue fixed
 * 0.1.1 - Minor changes
 * 0.1.0 - Initial Release

data/fluent-plugin-site24x7.gemspec

@@ -3,9 +3,9 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 
 Gem::Specification.new do |spec|
   spec.name    = "fluent-plugin-site24x7"
-  spec.version = "0.1.7"
+  spec.version = "0.1.9"
   spec.authors = ["Magesh Rajan"]
-  spec.email   = ["magesh.rajan@zohocorp.com"]
+  spec.email   = ["support@site24x7.com"]
 
   spec.summary       = %q{Site24x7 output plugin for Fluent event collector.}
   spec.homepage      = "https://github.com/site24x7/fluent-plugin-site24x7"
@@ -26,7 +26,6 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency 'webmock', '~> 3.5', '>= 3.5.0'
 
   spec.add_runtime_dependency "fluentd", [">= 0.14.10", "< 2"]
-  spec.add_runtime_dependency "net-http-persistent", '~> 3.1'
-
+  spec.add_runtime_dependency "net-http-persistent", '>= 3.1', '< 5'
 
 end

data/lib/fluent/plugin/out_site24x7.rb

@@ -28,6 +28,9 @@ class Fluent::Site24x7Output < Fluent::Plugin::Output
   config_param :http_idle_timeout, :integer, default: 5
   config_param :http_read_timeout, :integer, default: 30
   config_param :http_proxy, :string, :default => nil
+  # When true, disables TLS certificate verification of the upload endpoint.
+  # NOT recommended: it exposes the API key and log data to on-path attackers.
+  config_param :skip_ssl_verify, :bool, :default => false
 
   config_section :buffer do
     config_set_default :@type, "memory"
@@ -188,7 +191,15 @@ class Fluent::Site24x7Output < Fluent::Plugin::Output
     @uri = URI(upload_url)
     log.info "Starting HTTP connection to #{upload_url}"
     @s247_http_client = Net::HTTP::Persistent.new name: "fluent-plugin-site24x7", proxy: :ENV
-    @s247_http_client.verify_mode = OpenSSL::SSL::VERIFY_NONE
+    # Verify the server certificate by default (Net::HTTP::Persistent also does
+    # hostname verification when peer verification is on). skip_ssl_verify=true
+    # is an explicit, discouraged opt-out for trusted TLS-terminating proxies.
+    if @skip_ssl_verify
+      @s247_http_client.verify_mode = OpenSSL::SSL::VERIFY_NONE
+      log.warn "skip_ssl_verify=true: TLS certificate verification is disabled; the API key and logs can be intercepted by on-path attackers"
+    else
+      @s247_http_client.verify_mode = OpenSSL::SSL::VERIFY_PEER
+    end
     @s247_http_client.idle_timeout = @http_idle_timeout
     @s247_http_client.read_timeout = @http_read_timeout
     @s247_http_client.override_headers["Content-Type"] = "application/json"
@@ -778,4 +789,4 @@ class Fluent::Site24x7Output < Fluent::Plugin::Output
     end
   end
 
-end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fluent-plugin-site24x7
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.9
 platform: ruby
 authors:
 - Magesh Rajan
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-27 00:00:00.000000000 Z
+date: 2026-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -70,22 +70,22 @@ dependencies:
   name: webmock
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.5'
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.5.0
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.5'
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.5.0
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.5'
 - !ruby/object:Gem::Dependency
   name: fluentd
   requirement: !ruby/object:Gem::Requirement
@@ -110,19 +110,25 @@ dependencies:
   name: net-http-persistent
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '3.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '3.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5'
 description: 
 email:
-- magesh.rajan@zohocorp.com
+- support@site24x7.com
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -152,7 +158,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.0.3.1
 signing_key: 
 specification_version: 4
 summary: Site24x7 output plugin for Fluent event collector.