grok 0.0.3 → 0.0.4

data/README.rdoc

@@ -71,6 +71,16 @@ purposes of printing a summary, or whatever you want).
 You can define as many of these handlers as you'd like and they'll be run
 when the Ruby process has been sent a SIGINT.
 
+==== Start
+You can also define event handlers to run before Grok starts reading it's
+input.
+
+  start do
+    puts "Starting"
+  end
+
+You can define as many of these event handlers as you'd like
+
 == Note on Patches/Pull Requests
  
 * Fork the project.

data/VERSION

@@ -1 +1 @@
-0.0.3
+0.0.4

data/examples/gtrace.rb

@@ -0,0 +1,28 @@
+# Little proof of concept script that straces a running command and tells
+# you how long it's spent in each syscall (aggregated) on exit.
+#
+# ruby gtrace.rb <PID>
+
+require 'rubygems'
+require 'grok'
+
+configure do |c|
+  c.process = "strace -T -p #{ARGV[0]} 2>&1"
+end
+
+start do
+  @syscalls = {}
+end
+
+on /(\S+)\(.* .([\d\.]+)./ do |syscall, seconds|
+  if !@syscalls[syscall]
+    @syscalls[syscall] = 0.0
+  end
+  @syscalls[syscall] += seconds.to_f
+end
+
+exit do
+  @syscalls.keys.each { |syscall|
+    puts "#{syscall}: #{@syscalls[syscall].to_s} seconds"
+  }
+end

data/lib/grok.rb

@@ -12,7 +12,11 @@ def on(match, opts={}, &block)
 end
 
 def exit(&block)
-  $watcher.exit(&block)
+  $watcher.on_exit(&block)
+end
+
+def start(&block)
+  $watcher.on_start(&block)
 end
 
 trap "SIGINT", proc { $watcher.stop }

data/lib/grok/watcher.rb

@@ -25,11 +25,17 @@ module Grok
       (@events[:log] ||= []) << [Regexp.new(match), block, opts[:times], within]
     end
 
-    def exit(&block)
+    def on_exit(&block)
       (@events[:exit] ||= []) << block
     end
 
+    def on_start(&block)
+      (@events[:start] ||= []) << block
+    end
+
     def start
+      dispatch(:start)
+
       if !@config.file.nil?
         File.open(@config.file) do |log|
           log.extend(File::Tail)
@@ -82,7 +88,9 @@ module Grok
         Process.exit
       end
 
-      if handler = find(event, log)
+      if event == :start
+        @events[:start].each { |block| invoke block }
+      elsif handler = find(event, log)
         regexp, block, times, within = *handler
         self.match = log.match(regexp).captures
         (@event_log[match] ||= []) << Time.now.to_i

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: grok
 version: !ruby/object:Gem::Version 
-  version: 0.0.3
+  version: 0.0.4
 platform: ruby
 authors: 
 - Tim Sharpe
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-02-18 00:00:00 +11:00
+date: 2010-02-19 00:00:00 +11:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency 
@@ -48,6 +48,7 @@ files:
 - README.rdoc
 - Rakefile
 - VERSION
+- examples/gtrace.rb
 - examples/ssh_sentry.rb
 - lib/grok.rb
 - lib/grok/time.rb
@@ -85,4 +86,5 @@ summary: A ruby log event correlator
 test_files: 
 - test/test_grok.rb
 - test/helper.rb
+- examples/gtrace.rb
 - examples/ssh_sentry.rb