fluent-plugin-viaq_docker_audit_log_parser 0.0.2 → 0.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/fluent/plugin/parser_auditd.rb +2 -2
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 9a041ae8be29fd0671885a00cf1ed555f3972be2
|
|
4
|
+
data.tar.gz: e55ecd2d98b0f6f8465b8cfeac821660685b183a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 254c499b158f7fd0eb0fb5078a33f4ab1ec42391e22facc3bb0c1d88a2ed1735e90494b39880313cd8d450f82a0929856be6b34ea55db6239295e46df4de3948
|
|
7
|
+
data.tar.gz: b691bc3eaf9b2d00f5ab5eb8a74f2f96819f8021acd9a61381f190b3d6563661a5c503b2cf4c06f2ebe7b418e1d79ea5f0bf60c1fd070a8676daa3badf57478b
|
|
@@ -14,7 +14,7 @@ module Fluent
|
|
|
14
14
|
def parse(text)
|
|
15
15
|
begin
|
|
16
16
|
parsed_line = @auditd.parse_auditd_line text
|
|
17
|
-
time = parsed_line.nil? ?
|
|
17
|
+
time = parsed_line.nil? ? Time.now.to_f : DateTime.parse(parsed_line['time']).to_time.to_f
|
|
18
18
|
|
|
19
19
|
# All other logs than virt-control should be ignored.
|
|
20
20
|
# Since this plugin is tailored specifically to atomic-project
|
|
@@ -23,7 +23,7 @@ module Fluent
|
|
|
23
23
|
# that is easy to find and exclude by the fluentd grep plugin.
|
|
24
24
|
parsed_line = {"virt-control" => "false"} if parsed_line.nil?
|
|
25
25
|
|
|
26
|
-
yield
|
|
26
|
+
yield time, parsed_line
|
|
27
27
|
rescue Fluent::Auditd::AuditdParserException => e
|
|
28
28
|
log.error e.message
|
|
29
29
|
yield nil, nil
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: fluent-plugin-viaq_docker_audit_log_parser
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.0.
|
|
4
|
+
version: 0.0.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Josef Karasek
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2017-10-
|
|
11
|
+
date: 2017-10-10 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: bundler
|