logstash-filter-greynoise 0.1.1 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +3 -1
- data/README.md +2 -3
- data/lib/logstash/filters/greynoise.rb +3 -2
- data/logstash-filter-greynoise.gemspec +4 -1
- metadata +30 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 02c5ed56a6d3b4bffc883d25da6d66c7abd61fc0
|
4
|
+
data.tar.gz: 99c0527188bf3e77f74a703c8cc71d47eaf96e58
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ad820ec041db36ec73bc40e47975560eddcb97f2b47ac3cdd9f311c1ffae8c3e39e91da5241b8859886fc005fd5cf5d0ae353ff8fc79fcca4ddc576cac52247f
|
7
|
+
data.tar.gz: f89290a9a6ec3ebb26f07c0d393f0d8c096b157a257e096d5473e3eaeb5edb02912037501bdc2db787cd3f8c1e6f237962dd94118a3dafff473f924d0c1d2f57
|
data/CHANGELOG.md
CHANGED
data/README.md
CHANGED
@@ -1,5 +1,4 @@
|
|
1
|
-
# Logstash REST Filter
|
2
|
-
|
1
|
+
# Logstash REST Filter
|
3
2
|
This is a filter plugin for [Logstash](https://github.com/elastic/logstash).
|
4
3
|
|
5
4
|
It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way.
|
@@ -23,7 +22,7 @@ Or you can build it yourself:
|
|
23
22
|
git clone https://github.com/nsherron90/logstash-filter-greynoise.git
|
24
23
|
bundle install
|
25
24
|
gem build logstash-filter-greynoise.gemspec
|
26
|
-
$LS_HOME/bin/logstash-plugin install logstash-filter-greynoise-0.1.
|
25
|
+
$LS_HOME/bin/logstash-plugin install logstash-filter-greynoise-0.1.2.gem
|
27
26
|
```
|
28
27
|
|
29
28
|
### 2. Filter Configuration
|
@@ -41,10 +41,10 @@ class LogStash::Filters::Greynoise < LogStash::Filters::Base
|
|
41
41
|
url = "https://enterprise.api.greynoise.io/v2/noise/context/" + event.sprintf(ip)
|
42
42
|
uri = URI.parse(URI.encode(url.strip))
|
43
43
|
|
44
|
-
response = Faraday.get(uri, nil, Key: event.sprintf(key))
|
44
|
+
response = Faraday.get(uri, nil, 'User-Agent' => 'logstash-filter-greynoise', Key: event.sprintf(key))
|
45
45
|
else
|
46
46
|
url = "https://api.greynoise.io/v1/query/ip"
|
47
|
-
response = Faraday.post url, { :ip => event.sprintf(ip) }
|
47
|
+
response = Faraday.post url, { :ip => event.sprintf(ip) }, 'User-Agent' => 'logstash-filter-greynoise'
|
48
48
|
|
49
49
|
end
|
50
50
|
|
@@ -56,3 +56,4 @@ class LogStash::Filters::Greynoise < LogStash::Filters::Base
|
|
56
56
|
|
57
57
|
end # def filter
|
58
58
|
end # class LogStash::Filters::Greynoise
|
59
|
+
|
@@ -1,6 +1,6 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
s.name = 'logstash-filter-greynoise'
|
3
|
-
s.version = '0.1.
|
3
|
+
s.version = '0.1.2'
|
4
4
|
s.licenses = ['Apache-2.0']
|
5
5
|
s.summary = 'This greynoise filter takes contents in the ip field and returns greynoise api data (see https://greynoise.io/ for more info).'
|
6
6
|
s.description = 'This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install logstash-filter-greynoise. This gem is not a stand-alone program'
|
@@ -21,4 +21,7 @@ Gem::Specification.new do |s|
|
|
21
21
|
s.add_runtime_dependency 'logstash-core-plugin-api', '~> 2.0'
|
22
22
|
s.add_development_dependency 'logstash-devutils'
|
23
23
|
s.add_runtime_dependency 'faraday', '~> 0.9.2'
|
24
|
+
s.add_runtime_dependency 'lru_redux', '~> 1.1.0'
|
25
|
+
s.add_runtime_dependency 'timecop', '~> 0.9.1'
|
26
|
+
|
24
27
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-filter-greynoise
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.1.
|
4
|
+
version: 0.1.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- nsherron90
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2019-04-
|
11
|
+
date: 2019-04-29 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|
@@ -52,6 +52,34 @@ dependencies:
|
|
52
52
|
- - "~>"
|
53
53
|
- !ruby/object:Gem::Version
|
54
54
|
version: 0.9.2
|
55
|
+
- !ruby/object:Gem::Dependency
|
56
|
+
requirement: !ruby/object:Gem::Requirement
|
57
|
+
requirements:
|
58
|
+
- - "~>"
|
59
|
+
- !ruby/object:Gem::Version
|
60
|
+
version: 1.1.0
|
61
|
+
name: lru_redux
|
62
|
+
prerelease: false
|
63
|
+
type: :runtime
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
65
|
+
requirements:
|
66
|
+
- - "~>"
|
67
|
+
- !ruby/object:Gem::Version
|
68
|
+
version: 1.1.0
|
69
|
+
- !ruby/object:Gem::Dependency
|
70
|
+
requirement: !ruby/object:Gem::Requirement
|
71
|
+
requirements:
|
72
|
+
- - "~>"
|
73
|
+
- !ruby/object:Gem::Version
|
74
|
+
version: 0.9.1
|
75
|
+
name: timecop
|
76
|
+
prerelease: false
|
77
|
+
type: :runtime
|
78
|
+
version_requirements: !ruby/object:Gem::Requirement
|
79
|
+
requirements:
|
80
|
+
- - "~>"
|
81
|
+
- !ruby/object:Gem::Version
|
82
|
+
version: 0.9.1
|
55
83
|
description: This gem is a Logstash plugin required to be installed on top of the
|
56
84
|
Logstash core pipeline using $LS_HOME/bin/logstash-plugin install logstash-filter-greynoise.
|
57
85
|
This gem is not a stand-alone program
|