logstash-filter-greynoise 0.1.1 → 0.1.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +3 -1
- data/README.md +2 -3
- data/lib/logstash/filters/greynoise.rb +3 -2
- data/logstash-filter-greynoise.gemspec +4 -1
- metadata +30 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 02c5ed56a6d3b4bffc883d25da6d66c7abd61fc0
|
4
|
+
data.tar.gz: 99c0527188bf3e77f74a703c8cc71d47eaf96e58
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ad820ec041db36ec73bc40e47975560eddcb97f2b47ac3cdd9f311c1ffae8c3e39e91da5241b8859886fc005fd5cf5d0ae353ff8fc79fcca4ddc576cac52247f
|
7
|
+
data.tar.gz: f89290a9a6ec3ebb26f07c0d393f0d8c096b157a257e096d5473e3eaeb5edb02912037501bdc2db787cd3f8c1e6f237962dd94118a3dafff473f924d0c1d2f57
|
data/CHANGELOG.md
CHANGED
data/README.md
CHANGED
@@ -1,5 +1,4 @@
|
|
1
|
-
# Logstash REST Filter
|
2
|
-
|
1
|
+
# Logstash REST Filter
|
3
2
|
This is a filter plugin for [Logstash](https://github.com/elastic/logstash).
|
4
3
|
|
5
4
|
It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way.
|
@@ -23,7 +22,7 @@ Or you can build it yourself:
|
|
23
22
|
git clone https://github.com/nsherron90/logstash-filter-greynoise.git
|
24
23
|
bundle install
|
25
24
|
gem build logstash-filter-greynoise.gemspec
|
26
|
-
$LS_HOME/bin/logstash-plugin install logstash-filter-greynoise-0.1.
|
25
|
+
$LS_HOME/bin/logstash-plugin install logstash-filter-greynoise-0.1.2.gem
|
27
26
|
```
|
28
27
|
|
29
28
|
### 2. Filter Configuration
|
@@ -41,10 +41,10 @@ class LogStash::Filters::Greynoise < LogStash::Filters::Base
|
|
41
41
|
url = "https://enterprise.api.greynoise.io/v2/noise/context/" + event.sprintf(ip)
|
42
42
|
uri = URI.parse(URI.encode(url.strip))
|
43
43
|
|
44
|
-
response = Faraday.get(uri, nil, Key: event.sprintf(key))
|
44
|
+
response = Faraday.get(uri, nil, 'User-Agent' => 'logstash-filter-greynoise', Key: event.sprintf(key))
|
45
45
|
else
|
46
46
|
url = "https://api.greynoise.io/v1/query/ip"
|
47
|
-
response = Faraday.post url, { :ip => event.sprintf(ip) }
|
47
|
+
response = Faraday.post url, { :ip => event.sprintf(ip) }, 'User-Agent' => 'logstash-filter-greynoise'
|
48
48
|
|
49
49
|
end
|
50
50
|
|
@@ -56,3 +56,4 @@ class LogStash::Filters::Greynoise < LogStash::Filters::Base
|
|
56
56
|
|
57
57
|
end # def filter
|
58
58
|
end # class LogStash::Filters::Greynoise
|
59
|
+
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
s.name = 'logstash-filter-greynoise'
|
3
|
-
s.version = '0.1.
|
3
|
+
s.version = '0.1.2'
|
4
4
|
s.licenses = ['Apache-2.0']
|
5
5
|
s.summary = 'This greynoise filter takes contents in the ip field and returns greynoise api data (see https://greynoise.io/ for more info).'
|
6
6
|
s.description = 'This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install logstash-filter-greynoise. This gem is not a stand-alone program'
|
@@ -21,4 +21,7 @@ Gem::Specification.new do |s|
|
|
21
21
|
s.add_runtime_dependency 'logstash-core-plugin-api', '~> 2.0'
|
22
22
|
s.add_development_dependency 'logstash-devutils'
|
23
23
|
s.add_runtime_dependency 'faraday', '~> 0.9.2'
|
24
|
+
s.add_runtime_dependency 'lru_redux', '~> 1.1.0'
|
25
|
+
s.add_runtime_dependency 'timecop', '~> 0.9.1'
|
26
|
+
|
24
27
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-filter-greynoise
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.1.
|
4
|
+
version: 0.1.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- nsherron90
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2019-04-
|
11
|
+
date: 2019-04-29 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|
@@ -52,6 +52,34 @@ dependencies:
|
|
52
52
|
- - "~>"
|
53
53
|
- !ruby/object:Gem::Version
|
54
54
|
version: 0.9.2
|
55
|
+
- !ruby/object:Gem::Dependency
|
56
|
+
requirement: !ruby/object:Gem::Requirement
|
57
|
+
requirements:
|
58
|
+
- - "~>"
|
59
|
+
- !ruby/object:Gem::Version
|
60
|
+
version: 1.1.0
|
61
|
+
name: lru_redux
|
62
|
+
prerelease: false
|
63
|
+
type: :runtime
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
65
|
+
requirements:
|
66
|
+
- - "~>"
|
67
|
+
- !ruby/object:Gem::Version
|
68
|
+
version: 1.1.0
|
69
|
+
- !ruby/object:Gem::Dependency
|
70
|
+
requirement: !ruby/object:Gem::Requirement
|
71
|
+
requirements:
|
72
|
+
- - "~>"
|
73
|
+
- !ruby/object:Gem::Version
|
74
|
+
version: 0.9.1
|
75
|
+
name: timecop
|
76
|
+
prerelease: false
|
77
|
+
type: :runtime
|
78
|
+
version_requirements: !ruby/object:Gem::Requirement
|
79
|
+
requirements:
|
80
|
+
- - "~>"
|
81
|
+
- !ruby/object:Gem::Version
|
82
|
+
version: 0.9.1
|
55
83
|
description: This gem is a Logstash plugin required to be installed on top of the
|
56
84
|
Logstash core pipeline using $LS_HOME/bin/logstash-plugin install logstash-filter-greynoise.
|
57
85
|
This gem is not a stand-alone program
|