fluentd 0.12.40 → 1.6.2

data/test/plugin/test_parser_json.rb

@@ -0,0 +1,138 @@
+require_relative '../helper'
+require 'fluent/test/driver/parser'
+require 'fluent/plugin/parser'
+
+class JsonParserTest < ::Test::Unit::TestCase
+  def setup
+    Fluent::Test.setup
+    @parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::JSONParser)
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse(data)
+    @parser.configure('json_parser' => data)
+    @parser.instance.parse('{"time":1362020400,"host":"192.168.0.1","size":777,"method":"PUT"}') { |time, record|
+      assert_equal(event_time('2013-02-28 12:00:00 +0900').to_i, time)
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'size'   => 777,
+                     'method' => 'PUT',
+                   }, record)
+    }
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_with_large_float(data)
+    @parser.configure('json_parser' => data)
+    @parser.instance.parse('{"num":999999999999999999999999999999.99999}') { |time, record|
+      assert_equal(Float, record['num'].class)
+    }
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_without_time(data)
+    time_at_start = Time.now.to_i
+
+    @parser.configure('json_parser' => data)
+    @parser.instance.parse('{"host":"192.168.0.1","size":777,"method":"PUT"}') { |time, record|
+      assert time && time >= time_at_start, "parser puts current time without time input"
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'size'   => 777,
+                     'method' => 'PUT',
+                   }, record)
+    }
+
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::JSONParser)
+    parser.configure('json_parser' => data, 'estimate_current_event' => 'false')
+    parser.instance.parse('{"host":"192.168.0.1","size":777,"method":"PUT"}') { |time, record|
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'size'   => 777,
+                     'method' => 'PUT',
+                   }, record)
+      assert_nil time, "parser return nil w/o time and if specified so"
+    }
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_with_colon_string(data)
+    @parser.configure('json_parser' => data)
+    @parser.instance.parse('{"time":1362020400,"log":":message"}') { |time, record|
+      assert_equal(record['log'], ':message')
+    }
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_with_invalid_time(data)
+    @parser.configure('json_parser' => data)
+    assert_raise Fluent::ParserError do
+      @parser.instance.parse('{"time":[],"k":"v"}') { |time, record| }
+    end
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_float_time(data)
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::JSONParser)
+    parser.configure('json_parser' => data)
+    text = "100.1"
+    parser.instance.parse("{\"time\":\"#{text}\"}") do |time, record|
+      assert_equal 100, time.sec
+      assert_equal 100_000_000, time.nsec
+    end
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_with_keep_time_key(data)
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::JSONParser)
+    format = "%d/%b/%Y:%H:%M:%S %z"
+    parser.configure(
+                     'time_format' => format,
+                     'keep_time_key' => 'true',
+                     'json_parser' => data
+                     )
+    text = "28/Feb/2013:12:00:00 +0900"
+    parser.instance.parse("{\"time\":\"#{text}\"}") do |time, record|
+      assert_equal Time.strptime(text, format).to_i, time.sec
+      assert_equal text, record['time']
+    end
+  end
+
+  data('oj' => 'oj', 'yajl' => 'yajl')
+  def test_parse_with_keep_time_key_without_time_format(data)
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::JSONParser)
+    parser.configure(
+                     'keep_time_key' => 'true',
+                     'json_parser' => data
+                     )
+    text = "100"
+    parser.instance.parse("{\"time\":\"#{text}\"}") do |time, record|
+      assert_equal text.to_i, time.sec
+      assert_equal text, record['time']
+    end
+  end
+
+  def test_yajl_parse_io_with_buffer_smaller_than_input
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::JSONParser)
+    parser.configure(
+                     'keep_time_key' => 'true',
+                     'json_parser' => 'yajl',
+                     'stream_buffer_size' => 1,
+                     )
+    text = "100"
+
+    waiting(5) do
+      rd, wr = IO.pipe
+      wr.write "{\"time\":\"#{text}\"}"
+
+      parser.instance.parse_io(rd) do |time, record|
+        assert_equal text.to_i, time.sec
+        assert_equal text, record['time']
+
+        # Once a record has been received the 'write' end of the pipe must be
+        # closed, otherwise the test will block waiting for more input.
+        wr.close
+      end
+    end
+  end
+end

data/test/plugin/test_parser_labeled_tsv.rb

@@ -0,0 +1,145 @@
+require_relative '../helper'
+require 'fluent/test/driver/parser'
+require 'fluent/plugin/parser'
+
+class LabeledTSVParserTest < ::Test::Unit::TestCase
+  def setup
+    Fluent::Test.setup
+  end
+
+  def test_config_params
+    parser = Fluent::Test::Driver::Parser.new(Fluent::TextParser::LabeledTSVParser)
+
+    assert_equal "\t", parser.instance.delimiter
+    assert_equal  ":", parser.instance.label_delimiter
+
+    parser.configure(
+                     'delimiter'       => ',',
+                     'label_delimiter' => '=',
+                     )
+
+    assert_equal ",", parser.instance.delimiter
+    assert_equal "=", parser.instance.label_delimiter
+  end
+
+  def test_parse
+    parser = Fluent::Test::Driver::Parser.new(Fluent::TextParser::LabeledTSVParser)
+    parser.configure({})
+    parser.instance.parse("time:2013/02/28 12:00:00\thost:192.168.0.1\treq_id:111") { |time, record|
+      assert_equal(event_time('2013/02/28 12:00:00', format: '%Y/%m/%d %H:%M:%S'), time)
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'req_id' => '111',
+                   }, record)
+    }
+  end
+
+  def test_parse_with_customized_delimiter
+    parser = Fluent::Test::Driver::Parser.new(Fluent::TextParser::LabeledTSVParser)
+    parser.configure(
+                     'delimiter'       => ',',
+                     'label_delimiter' => '=',
+                     )
+    parser.instance.parse('time=2013/02/28 12:00:00,host=192.168.0.1,req_id=111') { |time, record|
+      assert_equal(event_time('2013/02/28 12:00:00', format: '%Y/%m/%d %H:%M:%S'), time)
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'req_id' => '111',
+                   }, record)
+    }
+  end
+
+  def test_parse_with_customized_time_format
+    parser = Fluent::Test::Driver::Parser.new(Fluent::TextParser::LabeledTSVParser)
+    parser.configure(
+                     'time_key'    => 'mytime',
+                     'time_format' => '%d/%b/%Y:%H:%M:%S %z',
+                     )
+    parser.instance.parse("mytime:28/Feb/2013:12:00:00 +0900\thost:192.168.0.1\treq_id:111") { |time, record|
+      assert_equal(event_time('28/Feb/2013:12:00:00 +0900', format: '%d/%b/%Y:%H:%M:%S %z'), time)
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'req_id' => '111',
+                   }, record)
+    }
+  end
+
+  def test_parse_without_time
+    time_at_start = Time.now.to_i
+
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::LabeledTSVParser)
+    parser.configure({})
+    parser.instance.parse("host:192.168.0.1\treq_id:111") { |time, record|
+      assert time && time >= time_at_start, "parser puts current time without time input"
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'req_id' => '111',
+                   }, record)
+    }
+
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::LabeledTSVParser)
+    parser.configure({'estimate_current_event' => 'no'})
+    parser.instance.parse("host:192.168.0.1\treq_id:111") { |time, record|
+      assert_equal({
+                     'host'   => '192.168.0.1',
+                     'req_id' => '111',
+                   }, record)
+      assert_nil time, "parser returns nil w/o time and if configured so"
+    }
+  end
+
+  def test_parse_with_keep_time_key
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::LabeledTSVParser)
+    parser.configure(
+                     'time_format'=>"%d/%b/%Y:%H:%M:%S %z",
+                     'keep_time_key'=>'true',
+                     )
+    text = '28/Feb/2013:12:00:00 +0900'
+    parser.instance.parse("time:#{text}") do |time, record|
+      assert_equal text, record['time']
+    end
+  end
+
+  def test_parse_with_null_value_pattern
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::LabeledTSVParser)
+    parser.configure(
+                     'null_value_pattern'=>'^(-|null|NULL)$'
+                     )
+    parser.instance.parse("a:-\tb:null\tc:NULL\td:\te:--\tf:nuLL") do |time, record|
+      assert_nil record['a']
+      assert_nil record['b']
+      assert_nil record['c']
+      assert_equal record['d'], ''
+      assert_equal record['e'], '--'
+      assert_equal record['f'], 'nuLL'
+    end
+  end
+
+  def test_parse_with_null_empty_string
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::LabeledTSVParser)
+    parser.configure(
+                     'null_empty_string'=>true
+                     )
+    parser.instance.parse("a:\tb: ") do |time, record|
+      assert_nil record['a']
+      assert_equal record['b'], ' '
+    end
+  end
+
+  data("single space" => ["k1=v1 k2=v2", { "k1" => "v1", "k2" => "v2" }],
+       "multiple space" => ["k1=v1    k2=v2", { "k1" => "v1", "k2" => "v2" }],
+       "reverse" => ["k2=v2 k1=v1", { "k1" => "v1", "k2" => "v2" }],
+       "tab" => ["k2=v2\tk1=v1", { "k1" => "v1", "k2" => "v2" }],
+       "tab and space" => ["k2=v2\t k1=v1", { "k1" => "v1", "k2" => "v2" }])
+  def test_parse_with_delimiter_pattern(data)
+    text, expected = data
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::LabeledTSVParser)
+    parser.configure(
+                     'delimiter_pattern' => '/\s+/',
+                     'label_delimiter' => '='
+                    )
+    parser.instance.parse(text) do |_time, record|
+      assert_equal(expected, record)
+    end
+  end
+end

data/test/plugin/test_parser_multiline.rb

@@ -0,0 +1,100 @@
+require_relative '../helper'
+require 'fluent/test/driver/parser'
+require 'fluent/plugin/parser'
+
+class MultilineParserTest < ::Test::Unit::TestCase
+  def setup
+    Fluent::Test.setup
+  end
+
+  def create_parser(conf)
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::MultilineParser).configure(conf)
+    parser
+  end
+
+  def test_configure_with_invalid_params
+    [{'format100' => '/(?<msg>.*)/'}, {'format1' => '/(?<msg>.*)/', 'format3' => '/(?<msg>.*)/'}, 'format1' => '/(?<msg>.*)'].each { |config|
+      assert_raise(Fluent::ConfigError) {
+        create_parser(config)
+      }
+    }
+  end
+
+  def test_parse
+    parser = create_parser('format1' => '/^(?<time>\d{4}-\d{1,2}-\d{1,2} \d{1,2}:\d{1,2}:\d{1,2}) \[(?<thread>.*)\] (?<level>[^\s]+)(?<message>.*)/')
+    parser.instance.parse(<<EOS.chomp) { |time, record|
+2013-3-03 14:27:33 [main] ERROR Main - Exception
+javax.management.RuntimeErrorException: null
+\tat Main.main(Main.java:16) ~[bin/:na]
+EOS
+
+      assert_equal(event_time('2013-3-03 14:27:33').to_i, time)
+      assert_equal({
+                     "thread"  => "main",
+                     "level"   => "ERROR",
+                     "message" => " Main - Exception\njavax.management.RuntimeErrorException: null\n\tat Main.main(Main.java:16) ~[bin/:na]"
+                   }, record)
+    }
+  end
+
+  def test_parse_with_firstline
+    parser = create_parser('format_firstline' => '/----/', 'format1' => '/time=(?<time>\d{4}-\d{1,2}-\d{1,2} \d{1,2}:\d{1,2}:\d{1,2}).*message=(?<message>.*)/')
+    parser.instance.parse(<<EOS.chomp) { |time, record|
+----
+time=2013-3-03 14:27:33
+message=test1
+EOS
+
+      assert(parser.instance.firstline?('----'))
+      assert_equal(event_time('2013-3-03 14:27:33').to_i, time)
+      assert_equal({"message" => "test1"}, record)
+    }
+  end
+
+  def test_parse_with_multiple_formats
+    parser = create_parser('format_firstline' => '/^Started/',
+                           'format1' => '/Started (?<method>[^ ]+) "(?<path>[^"]+)" for (?<host>[^ ]+) at (?<time>[^ ]+ [^ ]+ [^ ]+)\n/',
+                           'format2' => '/Processing by (?<controller>[^\u0023]+)\u0023(?<controller_method>[^ ]+) as (?<format>[^ ]+?)\n/',
+                           'format3' => '/(  Parameters: (?<parameters>[^ ]+)\n)?/',
+                           'format4' => '/  Rendered (?<template>[^ ]+) within (?<layout>.+) \([\d\.]+ms\)\n/',
+                           'format5' => '/Completed (?<code>[^ ]+) [^ ]+ in (?<runtime>[\d\.]+)ms \(Views: (?<view_runtime>[\d\.]+)ms \| ActiveRecord: (?<ar_runtime>[\d\.]+)ms\)/'
+                           )
+    parser.instance.parse(<<EOS.chomp) { |time, record|
+Started GET "/users/123/" for 127.0.0.1 at 2013-06-14 12:00:11 +0900
+Processing by UsersController#show as HTML
+  Parameters: {"user_id"=>"123"}
+  Rendered users/show.html.erb within layouts/application (0.3ms)
+Completed 200 OK in 4ms (Views: 3.2ms | ActiveRecord: 0.0ms)
+EOS
+
+      assert(parser.instance.firstline?('Started GET "/users/123/" for 127.0.0.1...'))
+      assert_equal(event_time('2013-06-14 12:00:11 +0900').to_i, time)
+      assert_equal({
+                     "method" => "GET",
+                     "path" => "/users/123/",
+                     "host" => "127.0.0.1",
+                     "controller" => "UsersController",
+                     "controller_method" => "show",
+                     "format" => "HTML",
+                     "parameters" => "{\"user_id\"=>\"123\"}",
+                     "template" => "users/show.html.erb",
+                     "layout" => "layouts/application",
+                     "code" => "200",
+                     "runtime" => "4",
+                     "view_runtime" => "3.2",
+                     "ar_runtime" => "0.0"
+                   }, record)
+    }
+  end
+
+  def test_parse_with_keep_time_key
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin::MultilineParser).configure(
+      'format1' => '/^(?<time>\d{4}-\d{1,2}-\d{1,2} \d{1,2}:\d{1,2}:\d{1,2})/',
+      'keep_time_key' => 'true'
+    )
+    text = '2013-3-03 14:27:33'
+    parser.instance.parse(text) { |time, record|
+      assert_equal text, record['time']
+    }
+  end
+end

data/test/plugin/test_parser_nginx.rb

@@ -0,0 +1,88 @@
+require_relative '../helper'
+require 'fluent/test/driver/parser'
+require 'fluent/plugin/parser_nginx'
+
+class NginxParserTest < ::Test::Unit::TestCase
+  def setup
+    Fluent::Test.setup
+    @expected = {
+      'remote'  => '127.0.0.1',
+      'host'    => '192.168.0.1',
+      'user'    => '-',
+      'method'  => 'GET',
+      'path'    => '/',
+      'code'    => '200',
+      'size'    => '777',
+      'referer' => '-',
+      'agent'   => 'Opera/12.0'
+    }
+    @expected_extended = {
+      'remote'               => '127.0.0.1',
+      'host'                 => '192.168.0.1',
+      'user'                 => '-',
+      'method'               => 'GET',
+      'path'                 => '/',
+      'code'                 => '200',
+      'size'                 => '777',
+      'referer'              => '-',
+      'agent'                => 'Opera/12.0',
+      'http_x_forwarded_for' => '-'
+    }
+    @expected_extended_multiple_ip = {
+      'remote'               => '127.0.0.1',
+      'host'                 => '192.168.0.1',
+      'user'                 => '-',
+      'method'               => 'GET',
+      'path'                 => '/',
+      'code'                 => '200',
+      'size'                 => '777',
+      'referer'              => '-',
+      'agent'                => 'Opera/12.0',
+      'http_x_forwarded_for' => '127.0.0.1, 192.168.0.1'
+    }
+  end
+
+  def create_driver
+    Fluent::Test::Driver::Parser.new(Fluent::Plugin::NginxParser.new).configure({})
+  end
+
+  def test_parse
+    d = create_driver
+    d.instance.parse('127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 +0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0"') { |time, record|
+      assert_equal(event_time('28/Feb/2013:12:00:00 +0900', format: '%d/%b/%Y:%H:%M:%S %z'), time)
+      assert_equal(@expected, record)
+    }
+  end
+
+  def test_parse_with_empty_included_path
+    d = create_driver
+    d.instance.parse('127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 +0900] "GET /a[ ]b HTTP/1.1" 200 777 "-" "Opera/12.0"') { |time, record|
+      assert_equal(event_time('28/Feb/2013:12:00:00 +0900', format: '%d/%b/%Y:%H:%M:%S %z'), time)
+      assert_equal(@expected.merge('path' => '/a[ ]b'), record)
+    }
+  end
+
+  def test_parse_without_http_version
+    d = create_driver
+    d.instance.parse('127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 +0900] "GET /" 200 777 "-" "Opera/12.0"') { |time, record|
+      assert_equal(event_time('28/Feb/2013:12:00:00 +0900', format: '%d/%b/%Y:%H:%M:%S %z'), time)
+      assert_equal(@expected, record)
+    }
+  end
+
+  def test_parse_with_http_x_forwarded_for
+    d = create_driver
+    d.instance.parse('127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 +0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0" -') { |time, record|
+      assert_equal(event_time('28/Feb/2013:12:00:00 +0900', format: '%d/%b/%Y:%H:%M:%S %z'), time)
+      assert_equal(@expected_extended, record)
+    }
+  end
+
+  def test_parse_with_http_x_forwarded_for_multiple_ip
+    d = create_driver
+    d.instance.parse('127.0.0.1 192.168.0.1 - [28/Feb/2013:12:00:00 +0900] "GET / HTTP/1.1" 200 777 "-" "Opera/12.0" "127.0.0.1, 192.168.0.1"') { |time, record|
+      assert_equal(event_time('28/Feb/2013:12:00:00 +0900', format: '%d/%b/%Y:%H:%M:%S %z'), time)
+      assert_equal(@expected_extended_multiple_ip, record)
+    }
+  end
+end

data/test/plugin/test_parser_none.rb

@@ -0,0 +1,52 @@
+require_relative '../helper'
+require 'fluent/test/driver/parser'
+require 'fluent/plugin/parser'
+
+class NoneParserTest < ::Test::Unit::TestCase
+  def setup
+    Fluent::Test.setup
+  end
+
+  def test_config_params
+    parser = Fluent::Test::Driver::Parser.new(Fluent::TextParser::NoneParser)
+    parser.configure({})
+    assert_equal "message", parser.instance.message_key
+
+    parser.configure('message_key' => 'foobar')
+    assert_equal "foobar", parser.instance.message_key
+  end
+
+  def test_parse
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin.new_parser('none'))
+    parser.configure({})
+    parser.instance.parse('log message!') { |time, record|
+      assert_equal({'message' => 'log message!'}, record)
+    }
+  end
+
+  def test_parse_with_message_key
+    parser = Fluent::Test::Driver::Parser.new(Fluent::TextParser::NoneParser)
+    parser.configure('message_key' => 'foobar')
+    parser.instance.parse('log message!') { |time, record|
+      assert_equal({'foobar' => 'log message!'}, record)
+    }
+  end
+
+  def test_parse_without_default_time
+    time_at_start = Time.now.to_i
+
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin.new_parser('none'))
+    parser.configure({})
+    parser.instance.parse('log message!') { |time, record|
+      assert time && time >= time_at_start, "parser puts current time without time input"
+      assert_equal({'message' => 'log message!'}, record)
+    }
+
+    parser = Fluent::Test::Driver::Parser.new(Fluent::Plugin.new_parser('none'))
+    parser.configure({'estimate_current_event' => 'false'})
+    parser.instance.parse('log message!') { |time, record|
+      assert_equal({'message' => 'log message!'}, record)
+      assert_nil time, "parser returns nil w/o time if configured so"
+    }
+  end
+end