hpess-logstash-codec-cef 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 57330ab16e56eb40f97c35161a31a89ef0a53db1
-  data.tar.gz: 279a1861c849597fa62833fb3bcb674dfd913c51
+  metadata.gz: 81a21440a62cb5391b36db282d926053bba698cb
+  data.tar.gz: 6186ee0d447ca21d76e74312b31ff7105be48b8e
 SHA512:
-  metadata.gz: ca205a4e25ec02147459e40d90608b861a4b308c33bab64b400c9bfee6637bb7cf55e265ffaa3b16480f968dc1cd3c99a50d47c9dffc29a10f8b233bf0a1b737
-  data.tar.gz: eb5375a8477c2a1f8c74e9a0c8c6ea7535d8190e5a86bee7782d20d8e8e599acdd6fe7a047e2458a1a4b229fe20ef114ac96d9d2b1c2e9473a03cbab8cdd2f3b
+  metadata.gz: 64823415d3340bff3627b6bd7ee5fd1acc4c5fa0b3baa31b397697d1f976c0f8975c0a6d89d0100060339ce0ff044df6b7155f37ef4bcd1c87d40d0612f0fff0
+  data.tar.gz: 2d308146c252b6ae4decd9a0318a39c6191e7f096f43610551c409633137726082df60df65b9d04210b346fd8a134608da96939a7b1bccd7f2e3d2985458c7c5

data/lib/logstash/codecs/cef.rb

@@ -36,7 +36,7 @@ class LogStash::Codecs::CEF < LogStash::Codecs::Base
       }
 
       # And save the new has as the extensions
-      event['cef_extension'] = extensions
+      event['cef_ext'] = extensions
     end
     yield event
   end

data/logstash-codec-cef.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'hpess-logstash-codec-cef'
-  s.version         = '0.2.0'
+  s.version         = '0.2.1'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "CEF codec to parse CEF formated logs"
   s.description     = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"

data/spec/codecs/cef_spec.rb

@@ -28,7 +28,7 @@ describe LogStash::Codecs::CEF do
         it "should parse the cef headers" do
             subject.decode(message) do |e|
                 validate(e)
-                ext = e['cef_extension']
+                ext = e['cef_ext']
                 insist { e["cef_vendor"] } == "security"
                 insist { e["cef_product"] } == "threatmanager"
             end
@@ -36,7 +36,7 @@ describe LogStash::Codecs::CEF do
 
         it "should parse the cef body" do
             subject.decode(message) do |e|
-                ext = e['cef_extension']
+                ext = e['cef_ext']
                 insist { ext['src'] } == "10.0.0.192"
                 insist { ext['dst'] } == "12.121.122.82"
                 insist { ext['spt'] } == "1232"
@@ -62,7 +62,7 @@ describe LogStash::Codecs::CEF do
         let (:escaped_pipes) { 'CEF:0|security|threatmanager|1.0|100|trojan successfully stopped|10|moo=this\|has an escaped pipe' }
         it "should be OK with escaped pipes in the message" do
             subject.decode(escaped_pipes) do |e|
-                ext = e['cef_extension']
+                ext = e['cef_ext']
                 insist { ext['moo'] } == 'this\|has an escaped pipe'
             end 
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hpess-logstash-codec-cef
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Elasticsearch