logstash-codec-sflow 0.5.0 → 0.6.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/logstash/codecs/sflow.rb +18 -9
- data/logstash-codec-sflow.gemspec +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 4d9455e0ace41b629b9ec9923f4836197af5812a
|
|
4
|
+
data.tar.gz: 42698e7d6e057851194c73f21f009ba4bf85fde5
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 1fba7428b3587a51a5bee4342b26215f6539c394802b600e93dac160cb33c3dbaff2be3969311b9e0bdafe52196f718b7f442d8057e40d023ca042417a4579e8
|
|
7
|
+
data.tar.gz: bedee6aa4b47de83a9ad6ea36ec77c6c80ccedbcfb553f654913fd15945413c7ca8047001af7df1b5ce1ba4df63ae1ab34cac1d6f49951abcb6e76adedf1f8ff
|
|
@@ -27,19 +27,16 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
27
27
|
end
|
|
28
28
|
end
|
|
29
29
|
|
|
30
|
+
# @param [Object] event
|
|
31
|
+
# @param [Object] decoded
|
|
32
|
+
# @param [Object] sample
|
|
33
|
+
# @param [Object] record
|
|
30
34
|
def common_sflow(event, decoded, sample, record)
|
|
31
|
-
# Ensure that some data exist for the record
|
|
32
|
-
if record['record_data'].to_s.eql? ''
|
|
33
|
-
@logger.warn("Unknown record entreprise #{record['record_entreprise'].to_s}, format #{record['record_format'].to_s}")
|
|
34
|
-
next
|
|
35
|
-
end
|
|
36
|
-
|
|
37
35
|
assign_key_value(event, decoded)
|
|
38
36
|
assign_key_value(event, sample)
|
|
39
37
|
assign_key_value(event, sample['sample_data'])
|
|
40
38
|
assign_key_value(event, record)
|
|
41
39
|
assign_key_value(event, record['record_data'])
|
|
42
|
-
|
|
43
40
|
end
|
|
44
41
|
|
|
45
42
|
public
|
|
@@ -66,8 +63,14 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
66
63
|
#treat sample flow
|
|
67
64
|
if sample['sample_entreprise'] == 0 && sample['sample_format'] == 1
|
|
68
65
|
# Create the logstash event
|
|
69
|
-
event = LogStash::Event.new
|
|
66
|
+
event = LogStash::Event.new
|
|
70
67
|
sample['sample_data']['records'].each do |record|
|
|
68
|
+
# Ensure that some data exist for the record
|
|
69
|
+
if record['record_data'].to_s.eql? ''
|
|
70
|
+
@logger.warn("Unknown record entreprise #{record['record_entreprise'].to_s}, format #{record['record_format'].to_s}")
|
|
71
|
+
next
|
|
72
|
+
end
|
|
73
|
+
|
|
71
74
|
common_sflow(event, decoded, sample, record)
|
|
72
75
|
|
|
73
76
|
unless record['record_data']['sample_header'].to_s.eql? ''
|
|
@@ -85,8 +88,14 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
85
88
|
#treat counter flow
|
|
86
89
|
elsif sample['sample_entreprise'] == 0 && sample['sample_format'] == 2
|
|
87
90
|
sample['sample_data']['records'].each do |record|
|
|
91
|
+
# Ensure that some data exist for the record
|
|
92
|
+
if record['record_data'].to_s.eql? ''
|
|
93
|
+
@logger.warn("Unknown record entreprise #{record['record_entreprise'].to_s}, format #{record['record_format'].to_s}")
|
|
94
|
+
next
|
|
95
|
+
end
|
|
96
|
+
|
|
88
97
|
# Create the logstash event
|
|
89
|
-
event = LogStash::Event.new
|
|
98
|
+
event = LogStash::Event.new
|
|
90
99
|
|
|
91
100
|
common_sflow(event, decoded, sample, record)
|
|
92
101
|
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-codec-sflow'
|
|
4
|
-
s.version = '0.
|
|
4
|
+
s.version = '0.6.0'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "The sflow codec is for decoding SFlow v5 flows."
|
|
7
7
|
s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
|