logstash-codec-sflow 0.5.0 → 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/logstash/codecs/sflow.rb +18 -9
- data/logstash-codec-sflow.gemspec +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 4d9455e0ace41b629b9ec9923f4836197af5812a
|
|
4
|
+
data.tar.gz: 42698e7d6e057851194c73f21f009ba4bf85fde5
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 1fba7428b3587a51a5bee4342b26215f6539c394802b600e93dac160cb33c3dbaff2be3969311b9e0bdafe52196f718b7f442d8057e40d023ca042417a4579e8
|
|
7
|
+
data.tar.gz: bedee6aa4b47de83a9ad6ea36ec77c6c80ccedbcfb553f654913fd15945413c7ca8047001af7df1b5ce1ba4df63ae1ab34cac1d6f49951abcb6e76adedf1f8ff
|
|
@@ -27,19 +27,16 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
27
27
|
end
|
|
28
28
|
end
|
|
29
29
|
|
|
30
|
+
# @param [Object] event
|
|
31
|
+
# @param [Object] decoded
|
|
32
|
+
# @param [Object] sample
|
|
33
|
+
# @param [Object] record
|
|
30
34
|
def common_sflow(event, decoded, sample, record)
|
|
31
|
-
# Ensure that some data exist for the record
|
|
32
|
-
if record['record_data'].to_s.eql? ''
|
|
33
|
-
@logger.warn("Unknown record entreprise #{record['record_entreprise'].to_s}, format #{record['record_format'].to_s}")
|
|
34
|
-
next
|
|
35
|
-
end
|
|
36
|
-
|
|
37
35
|
assign_key_value(event, decoded)
|
|
38
36
|
assign_key_value(event, sample)
|
|
39
37
|
assign_key_value(event, sample['sample_data'])
|
|
40
38
|
assign_key_value(event, record)
|
|
41
39
|
assign_key_value(event, record['record_data'])
|
|
42
|
-
|
|
43
40
|
end
|
|
44
41
|
|
|
45
42
|
public
|
|
@@ -66,8 +63,14 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
66
63
|
#treat sample flow
|
|
67
64
|
if sample['sample_entreprise'] == 0 && sample['sample_format'] == 1
|
|
68
65
|
# Create the logstash event
|
|
69
|
-
event = LogStash::Event.new
|
|
66
|
+
event = LogStash::Event.new
|
|
70
67
|
sample['sample_data']['records'].each do |record|
|
|
68
|
+
# Ensure that some data exist for the record
|
|
69
|
+
if record['record_data'].to_s.eql? ''
|
|
70
|
+
@logger.warn("Unknown record entreprise #{record['record_entreprise'].to_s}, format #{record['record_format'].to_s}")
|
|
71
|
+
next
|
|
72
|
+
end
|
|
73
|
+
|
|
71
74
|
common_sflow(event, decoded, sample, record)
|
|
72
75
|
|
|
73
76
|
unless record['record_data']['sample_header'].to_s.eql? ''
|
|
@@ -85,8 +88,14 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
85
88
|
#treat counter flow
|
|
86
89
|
elsif sample['sample_entreprise'] == 0 && sample['sample_format'] == 2
|
|
87
90
|
sample['sample_data']['records'].each do |record|
|
|
91
|
+
# Ensure that some data exist for the record
|
|
92
|
+
if record['record_data'].to_s.eql? ''
|
|
93
|
+
@logger.warn("Unknown record entreprise #{record['record_entreprise'].to_s}, format #{record['record_format'].to_s}")
|
|
94
|
+
next
|
|
95
|
+
end
|
|
96
|
+
|
|
88
97
|
# Create the logstash event
|
|
89
|
-
event = LogStash::Event.new
|
|
98
|
+
event = LogStash::Event.new
|
|
90
99
|
|
|
91
100
|
common_sflow(event, decoded, sample, record)
|
|
92
101
|
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-codec-sflow'
|
|
4
|
-
s.version = '0.
|
|
4
|
+
s.version = '0.6.0'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "The sflow codec is for decoding SFlow v5 flows."
|
|
7
7
|
s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
|