logstash-codec-idmef 0.9.1 → 0.9.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +3 -0
- data/lib/logstash/codecs/idmef.rb +3 -0
- data/logstash-codec-idmef.gemspec +1 -1
- data/spec/codecs/idmef_spec.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: bee9b9f0182fef0bcd42950cca6f2054c1ae67ae930af3f595de7c5585e469a3
|
|
4
|
+
data.tar.gz: a01247e5d91019463034e22409f78ebb5edc3070da618af8d3aad975457bb9e5
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9d4c5fd3c37b23c0ac9a640353d61a3d1466832cd4260b577410b3f9edf891b61c382b12f238d43e8608dcc38bd06f108c5b483c742d16b85e4794e623f6ed87
|
|
7
|
+
data.tar.gz: 141900ff71dc0067a6d80eb6fdee557ebfd034792abe859cb87fbfce914be00183fd428cf541e5f4d2282829fee0f68287326f3e22c3d3a49b89983bf716b09a
|
data/CHANGELOG.md
CHANGED
|
@@ -463,6 +463,9 @@ class LogStash::Codecs::IDMEF < LogStash::Codecs::Base
|
|
|
463
463
|
if @additionaldata
|
|
464
464
|
idx = xml.xpath('/IDMEF-Message/Alert/AddionnalData').length
|
|
465
465
|
e.to_hash.each do |key, value|
|
|
466
|
+
if value.to_s.empty?
|
|
467
|
+
next
|
|
468
|
+
end
|
|
466
469
|
if value.kind_of?(Integer)
|
|
467
470
|
t = "integer"
|
|
468
471
|
elsif value.kind_of?(Float)
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-codec-idmef'
|
|
4
|
-
s.version = '0.9.
|
|
4
|
+
s.version = '0.9.2'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "Create IDMEF in XML"
|
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
data/spec/codecs/idmef_spec.rb
CHANGED
|
@@ -15,7 +15,7 @@ describe LogStash::Codecs::IDMEF do
|
|
|
15
15
|
it "should return proper IDMEF XML from event" do
|
|
16
16
|
codec.on_event{|data, newdata| results << newdata}
|
|
17
17
|
codec.paths = {"alert.messageid" => "67a63ad4-11b9-4ee2-8aee-d1c032a13b35" }
|
|
18
|
-
event = LogStash::Event.new("@timestamp" => DateTime.parse("2020-05-24T09:05:26.758Z").to_time, "host" => "localhost.localdomain", "message" => "Login attempt", "@version" => "1")
|
|
18
|
+
event = LogStash::Event.new("@timestamp" => DateTime.parse("2020-05-24T09:05:26.758Z").to_time, "host" => "localhost.localdomain", "message" => "Login attempt", "@version" => "1", "msg" => "")
|
|
19
19
|
codec.encode(event)
|
|
20
20
|
insist {results.first} == expected_result
|
|
21
21
|
end
|