logstash-filter-grok 3.2.1 → 3.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 26ce02b49c1b5bf27a1ea5470cef3b2875fa73e6
-  data.tar.gz: 936454b6cf21105471e21ed161835d722a9092c2
+  metadata.gz: b2156be2aaef0d13ad330e90b4e944f07fd5caa4
+  data.tar.gz: 8942af6f6ca5680c40f4851e6ba94c669e79bfc1
 SHA512:
-  metadata.gz: 2723677afeb369af6e1555b308b11c24ee4cb9f6c1baf6b74fc2fdedcff3e4d09702bcabf1532a2738134850eaa9f4c9821daf3f230df02f0a2c8bed66f701eb
-  data.tar.gz: 2625317a10db35a9de2905ba534bfa80bbf7d6df031122077e180e252d0dc20ea1bfdaa46e62ada24894150502275c007c6706ef3433bb5a02735c45189b26c2
+  metadata.gz: ab1e10603d6cbf3bd6ee646a2e2c201f327c0e435c06cfb4e729905ed062fbbd1ce8afa1cadc0a4ac69620af36657a7a2cc252cc28f26dec040d0e802bed20fd
+  data.tar.gz: 9aa1ba7a12e0f8bdff56979d508e367a34d5d1f140c10e73d0dd0571e72c5727e3cd3bf7d9ca7a097dbaa82584644a53bc9a4a5cd12a7147047045220211f9cd

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 3.2.2
+  - Move one log message from info to debug to avoid noise
+
 ## 3.2.1
   - Fix race condition in TimeoutEnforcer that could cause crashes
   - Fix shutdown code to close cleanly and properly close the enforcer

data/lib/logstash/filters/grok.rb

@@ -254,7 +254,7 @@
 
       @patterns = Hash.new { |h,k| h[k] = [] }
 
-      @logger.info? and @logger.info("Match data", :match => @match)
+      @logger.debug("Match data", :match => @match)
 
       @metric_match_fields = metric.namespace(:patterns_per_field)
 
@@ -262,7 +262,7 @@
         patterns = [patterns] if patterns.is_a?(String)
         @metric_match_fields.gauge(field, patterns.length)
 
-        @logger.info? and @logger.info("Grok compile", :field => field, :patterns => patterns)
+        @logger.trace("Grok compile", :field => field, :patterns => patterns)
         patterns.each do |pattern|
           @logger.debug? and @logger.debug("regexp: #{@type}/#{field}", :pattern => pattern)
           grok = Grok.new
@@ -367,14 +367,14 @@
     private
     def patterns_files_from_paths(paths, glob)
       patternfiles = []
-      @logger.info? and @logger.info("Grok patterns path", :paths => paths)
+      @logger.debug("Grok patterns path", :paths => paths)
       paths.each do |path|
         if File.directory?(path)
           path = File.join(path, glob)
         end
 
         Dir.glob(path).each do |file|
-          @logger.info? and @logger.info("Grok loading patterns from file", :path => file)
+          @logger.trace("Grok loading patterns from file", :path => file)
           patternfiles << file
         end
       end

data/logstash-filter-grok.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-filter-grok'
-  s.version         = '3.2.1'
+  s.version         = '3.2.2'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "Parse arbitrary text and structure it."
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"

data/spec/filters/grok_spec.rb

@@ -840,4 +840,19 @@ describe LogStash::Filters::Grok do
     end
   end
 
+  describe "after grok when the event is JSON serialised the field values are unchanged" do
+    config <<-CONFIG
+      filter {grok {match => ["message", "Failed password for (invalid user |)%{USERNAME:username} from %{IP:src_ip} port %{BASE10NUM:port}"] remove_field => ["message","severity"] add_tag => ["ssh_failure"]}}
+    CONFIG
+
+    sample('{"facility":"auth","message":"Failed password for testuser from 1.1.1.1 port 22"}') do
+      insist { subject.get("username") } == "testuser"
+      insist { subject.get("port") } == "22"
+      insist { subject.get("src_ip") } == "1.1.1.1"
+      insist { LogStash::Json.dump(subject.get('username')) } == "\"testuser\""
+
+      insist { subject.to_json } =~ %r|{"src_ip":"1.1.1.1","@timestamp":"20\d\d-\d\d-\d\dT\d\d:\d\d:\d\d\.\d\d\dZ","port":"22","@version":"1","username":"testuser","tags":\["ssh_failure"\]}|
+    end
+  end
+
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-grok
 version: !ruby/object:Gem::Version
-  version: 3.2.1
+  version: 3.2.2
 platform: ruby
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2016-08-08 00:00:00.000000000 Z
+date: 2016-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement