logstash-filter-kv 2.1.0 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 63ffef94da43256770287a0a3f1e25791617f74a
-  data.tar.gz: e36145dfaf5d8184e4dd7d60418c9c36dcfab319
+  metadata.gz: ce56ac9539711025a45de58bdac21db2b31cc422
+  data.tar.gz: 10efa6007a01d8489895835362d3d30ba9c3fa07
 SHA512:
-  metadata.gz: f7bd945d5df9b1eaae90b399910612d5236c8ff0bcf55ab4feedbe87995e39a0dcb09cccc3139a6afd2dafdaf998ed1ed02625f31a957e76cae812285fc72780
-  data.tar.gz: ff374c0ac7d74d7c2f3f772a28481c89122cc21fcac883843a4873475c508d71f31e85eec0aac4a11baa947ea9a624e3bfbcfbfaf8128f6ded14c5082271681b
+  metadata.gz: 5d9e9c20fb456e6030793b40e88ddc2e82a94c46f72caafb2a27945d574bd5d976caabffb01520f1cffdd9c7780d49304d4c26e7939c8269d5e514c6c6459d41
+  data.tar.gz: cf72c8ae0888c2e6a69c9ce0644929ed93b409b76b1ac849fe646a951819ca515adf8179f76ac10ef62de274d9de0d1d16b635ac7194b5151b09995bca2b2c69

data/CHANGELOG.md

@@ -1,6 +1,5 @@
-# 2.1.0
-  - Adds :transform_value and :transform_key options to lowercase/upcase or capitalize all keys/values
-
+## 3.0.0
+  - Update the plugin to the version 2.0 of the plugin api, this change is required for Logstash 5.0 compatibility. See https://github.com/elastic/logstash/issues/5141
 # 2.0.7
   - With include_brackets enabled, angle brackets (\< and \>) are treated the same as square brackets and parentheses, making it easy to parse strings like "a=\<b\> c=\<d\>".
   - An empty value_split option value now gives a useful error message.

data/Gemfile

@@ -1,2 +1,4 @@
 source 'https://rubygems.org'
-gemspec
+
+# Specify your gem's dependencies in logstash-mass_effect.gemspec
+gemspec

data/lib/logstash/filters/kv.rb

@@ -29,11 +29,6 @@ require "logstash/namespace"
 class LogStash::Filters::KV < LogStash::Filters::Base
   config_name "kv"
 
-  # Constants used for transform check
-  TRANSFORM_LOWERCASE_KEY = "lowercase"
-  TRANSFORM_UPPERCASE_KEY = "uppercase"
-  TRANSFORM_CAPITALIZE_KEY = "capitalize"
-
   # A string of characters to trim from the value. This is useful if your
   # values are wrapped in brackets or are terminated with commas (like postfix
   # logs).
@@ -65,28 +60,6 @@ class LogStash::Filters::KV < LogStash::Filters::Base
   #     }
   config :trimkey, :validate => :string
 
-  # Transform values to lower case, upper case or capitals.
-  #
-  # For example, to capitalize all values:
-  # [source,ruby]
-  #     filter {
-  #       kv {
-  #         transform_value => "capitalize"
-  #       }
-  #     }
-  config :transform_value, :validate => [TRANSFORM_LOWERCASE_KEY, TRANSFORM_UPPERCASE_KEY, TRANSFORM_CAPITALIZE_KEY]
-
-  # Transform keys to lower case, upper case or capitals.
-  #
-  # For example, to lowercase all keys:
-  # [source,ruby]
-  #     filter {
-  #       kv {
-  #         transform_key => "lowercase"
-  #       }
-  #     }
-  config :transform_key, :validate => [TRANSFORM_LOWERCASE_KEY, TRANSFORM_UPPERCASE_KEY, TRANSFORM_CAPITALIZE_KEY]
-
   # A string of characters to use as delimiters for parsing out key-value pairs.
   #
   # These characters form a regex character class and thus you must escape special regex
@@ -262,7 +235,7 @@ class LogStash::Filters::KV < LogStash::Filters::Base
 
   def filter(event)
     kv = Hash.new
-    value = event[@source]
+    value = event.get(@source)
 
     case value
     when nil
@@ -282,9 +255,9 @@ class LogStash::Filters::KV < LogStash::Filters::Base
 
     if @target
       @logger.debug? && @logger.debug("Overwriting existing target field", :target => @target)
-      event[@target] = kv
+      event.set(@target, kv)
     else
-      kv.each{|k, v| event[k] = v}
+      kv.each{|k, v| event.set(k, v)}
     end
 
     filter_matched(event)
@@ -296,17 +269,6 @@ class LogStash::Filters::KV < LogStash::Filters::Base
     s =~ @value_split_re
   end
 
-  def transform(text, method)
-    case method
-    when TRANSFORM_LOWERCASE_KEY
-      return text.downcase
-    when TRANSFORM_UPPERCASE_KEY
-      return text.upcase
-    when TRANSFORM_CAPITALIZE_KEY
-      return text.capitalize
-    end
-  end
-
   def parse(text, event, kv_keys)
     # short circuit parsing if the text does not contain the @value_split
     return kv_keys unless has_value_splitter?(text)
@@ -318,7 +280,6 @@ class LogStash::Filters::KV < LogStash::Filters::Base
     text.scan(@scan_re) do |key, v1, v2, v3, v4, v5, v6|
       value = v1 || v2 || v3 || v4 || v5 || v6
       key = @trimkey ? key.gsub(@trimkey_re, "") : key
-      key = @transform_key ? transform(key, @transform_key) : key
 
       # Bail out as per the values of include_keys and exclude_keys
       next if not include_keys.empty? and not include_keys.include?(key)
@@ -328,7 +289,6 @@ class LogStash::Filters::KV < LogStash::Filters::Base
       key = event.sprintf(@prefix) + key
 
       value = @trim ? value.gsub(@trim_re, "") : value
-      value = @transform_value ? transform(value, @transform_value) : value
 
       # Bail out if inserting duplicate value in key mapping when unique_values
       # option is set to true.

data/logstash-filter-kv.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-filter-kv'
-  s.version         = '2.1.0'
+  s.version         = '3.0.0'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "This filter helps automatically parse messages (or specific event fields) which are of the 'foo=bar' variety."
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
@@ -20,7 +20,7 @@ Gem::Specification.new do |s|
   s.metadata = { "logstash_plugin" => "true", "logstash_group" => "filter" }
 
   # Gem dependencies
-  s.add_runtime_dependency "logstash-core-plugin-api", "~> 1.0"
+  s.add_runtime_dependency "logstash-core-plugin-api", "~> 2.0"
 
   s.add_development_dependency 'logstash-devutils'
 end

data/spec/filters/kv_spec.rb

@@ -15,74 +15,14 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world' bracketsone=(hello world) bracketstwo=[hello world] bracketsthree=<hello world>" do
-      insist { subject["hello"] } == "world"
-      insist { subject["foo"] } == "bar"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
-      insist { subject["singlequoted"] } == "hello world"
-      insist { subject["bracketsone"] } == "hello world"
-      insist { subject["bracketstwo"] } == "hello world"
-      insist { subject["bracketsthree"] } == "hello world"
-    end
-  end
-
-  describe  "test transforming keys to uppercase and values to lowercase" do
-    config <<-CONFIG
-      filter {
-        kv {
-          transform_key => "uppercase"
-          transform_value => "lowercase"
-        }
-      }
-    CONFIG
-
-    sample "hello = world Foo =Bar BAZ= FIZZ doublequoteD = \"hellO worlD\" Singlequoted= 'Hello World' brAckets =(hello World)" do
-      insist { subject["HELLO"] } == "world"
-      insist { subject["FOO"] } == "bar"
-      insist { subject["BAZ"] } == "fizz"
-      insist { subject["DOUBLEQUOTED"] } == "hello world"
-      insist { subject["SINGLEQUOTED"] } == "hello world"
-      insist { subject["BRACKETS"] } == "hello world"
-    end
-  end
-
-  describe  "test transforming keys to lowercase and values to uppercase" do
-    config <<-CONFIG
-      filter {
-        kv {
-          transform_key => "lowercase"
-          transform_value => "uppercase"
-        }
-      }
-    CONFIG
-
-    sample "Hello = World fOo =bar baz= FIZZ DOUBLEQUOTED = \"hellO worlD\" singlequoted= 'hEllo wOrld' brackets =(HELLO world)" do
-      insist { subject["hello"] } == "WORLD"
-      insist { subject["foo"] } == "BAR"
-      insist { subject["baz"] } == "FIZZ"
-      insist { subject["doublequoted"] } == "HELLO WORLD"
-      insist { subject["singlequoted"] } == "HELLO WORLD"
-      insist { subject["brackets"] } == "HELLO WORLD"
-    end
-  end
-
-  describe  "test transforming keys and values to capitals" do
-    config <<-CONFIG
-      filter {
-        kv {
-          transform_key => "capitalize"
-          transform_value => "capitalize"
-        }
-      }
-    CONFIG
-
-    sample "Hello = World fOo =bar baz= FIZZ DOUBLEQUOTED = \"hellO worlD\" singlequoted= 'hEllo wOrld' brackets =(HELLO world)" do
-      insist { subject["Hello"] } == "World"
-      insist { subject["Foo"] } == "Bar"
-      insist { subject["Baz"] } == "Fizz"
-      insist { subject["Doublequoted"] } == "Hello world"
-      insist { subject["Singlequoted"] } == "Hello world"
-      insist { subject["Brackets"] } == "Hello world"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
+      insist { subject.get("singlequoted") } == "hello world"
+      insist { subject.get("bracketsone") } == "hello world"
+      insist { subject.get("bracketstwo") } == "hello world"
+      insist { subject.get("bracketsthree") } == "hello world"
     end
   end
 
@@ -94,12 +34,12 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello = world foo =bar baz= fizz doublequoted = \"hello world\" singlequoted= 'hello world' brackets =(hello world)" do
-      insist { subject["hello"] } == "world"
-      insist { subject["foo"] } == "bar"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
-      insist { subject["singlequoted"] } == "hello world"
-      insist { subject["brackets"] } == "hello world"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
+      insist { subject.get("singlequoted") } == "hello world"
+      insist { subject.get("brackets") } == "hello world"
     end
   end
 
@@ -111,8 +51,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample 'IKE:=Quick\ Mode\ completion IKE\ IDs:=subnet:\ x.x.x.x\ (mask=\ 255.255.255.254)\ and\ host:\ y.y.y.y' do
-      insist { subject["IKE"] } == '=Quick\ Mode\ completion'
-      insist { subject['IKE\ IDs'] } == '=subnet:\ x.x.x.x\ (mask=\ 255.255.255.254)\ and\ host:\ y.y.y.y'
+      insist { subject.get("IKE") } == '=Quick\ Mode\ completion'
+      insist { subject.get('IKE\ IDs') } == '=subnet:\ x.x.x.x\ (mask=\ 255.255.255.254)\ and\ host:\ y.y.y.y'
     end
   end
 
@@ -125,12 +65,12 @@ describe LogStash::Filters::KV do
       CONFIG
 
       sample "hello:=world foo:bar baz=:fizz doublequoted:\"hello world\" singlequoted:'hello world' brackets:(hello world)" do
-        insist { subject["hello"] } == "=world"
-        insist { subject["foo"] } == "bar"
-        insist { subject["baz="] } == "fizz"
-        insist { subject["doublequoted"] } == "hello world"
-        insist { subject["singlequoted"] } == "hello world"
-        insist { subject["brackets"] } == "hello world"
+        insist { subject.get("hello") } == "=world"
+        insist { subject.get("foo") } == "bar"
+        insist { subject.get("baz=") } == "fizz"
+        insist { subject.get("doublequoted") } == "hello world"
+        insist { subject.get("singlequoted") } == "hello world"
+        insist { subject.get("brackets") } == "hello world"
       end
     end
   end
@@ -177,7 +117,7 @@ describe LogStash::Filters::KV do
 
         it "should extract kv" do
           subject.filter(event)
-          expect(event["foo"]).to eq(inner)
+          expect(event.get("foo")).to eq(inner)
         end
 
         it "should short circuit" do
@@ -198,8 +138,8 @@ describe LogStash::Filters::KV do
 
         it "should extract kv" do
           subject.filter(event)
-          expect(event["foo"]).to eq(foo_val)
-          expect(event["[bar][baz]"]).to eq(baz_val)
+          expect(event.get("foo")).to eq(foo_val)
+          expect(event.get("[bar][baz]")).to eq(baz_val)
         end
 
         it "should short circuit" do
@@ -229,12 +169,12 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "?hello=world&foo=bar&baz=fizz&doublequoted=\"hello world\"&singlequoted='hello world'&ignoreme&foo12=bar12" do
-      insist { subject["hello"] } == "world"
-      insist { subject["foo"] } == "bar"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
-      insist { subject["singlequoted"] } == "hello world"
-      insist { subject["foo12"] } == "bar12"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
+      insist { subject.get("singlequoted") } == "hello world"
+      insist { subject.get("foo12") } == "bar12"
     end
   end
 
@@ -246,8 +186,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "bracketsone=(hello world) bracketstwo=[hello world]" do
-      insist { subject["bracketsone"] } == "(hello"
-      insist { subject["bracketstwo"] } == "[hello"
+      insist { subject.get("bracketsone") } == "(hello"
+      insist { subject.get("bracketstwo") } == "[hello"
     end
   end
 
@@ -261,10 +201,10 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample 'IKE="Quick Mode completion" IKE\ IDs = (subnet= x.x.x.x mask= 255.255.255.254 and host=y.y.y.y)' do
-      insist { subject["IKE"] } == 'Quick Mode completion'
-      insist { subject['IKE\ IDs']['subnet'] } == 'x.x.x.x'
-      insist { subject['IKE\ IDs']['mask'] } == '255.255.255.254'
-      insist { subject['IKE\ IDs']['host'] } == 'y.y.y.y'
+      insist { subject.get("IKE") } == 'Quick Mode completion'
+      insist { subject.get('IKE\ IDs')['subnet'] } == 'x.x.x.x'
+      insist { subject.get('IKE\ IDs')['mask'] } == '255.255.255.254'
+      insist { subject.get('IKE\ IDs')['host'] } == 'y.y.y.y'
     end
   end
 
@@ -276,9 +216,9 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "field1=test|field2=another test|field3=test3" do
-      insist { subject["field1"] } == "test"
-      insist { subject["field2"] } == "another test"
-      insist { subject["field3"] } == "test3"
+      insist { subject.get("field1") } == "test"
+      insist { subject.get("field2") } == "another test"
+      insist { subject.get("field3") } == "test3"
     end
   end
 
@@ -290,11 +230,11 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["__hello"] } == "world"
-      insist { subject["__foo"] } == "bar"
-      insist { subject["__baz"] } == "fizz"
-      insist { subject["__doublequoted"] } == "hello world"
-      insist { subject["__singlequoted"] } == "hello world"
+      insist { subject.get("__hello") } == "world"
+      insist { subject.get("__foo") } == "bar"
+      insist { subject.get("__baz") } == "fizz"
+      insist { subject.get("__doublequoted") } == "hello world"
+      insist { subject.get("__singlequoted") } == "hello world"
     end
 
   end
@@ -335,8 +275,8 @@ describe LogStash::Filters::KV do
       CONFIG
 
       sample "hello=world" do
-        insist { subject["hello"] } == "world"
-        insist { subject["tags"] }.include?("hello")
+        insist { subject.get("hello") } == "world"
+        insist { subject.get("tags") }.include?("hello")
       end
     end
     context "should not activate when failing" do
@@ -347,7 +287,7 @@ describe LogStash::Filters::KV do
       CONFIG
 
       sample "this is not key value" do
-        insist { subject["tags"] }.nil?
+        insist { subject.get("tags") }.nil?
       end
     end
   end
@@ -361,8 +301,8 @@ describe LogStash::Filters::KV do
       CONFIG
 
       sample "hello=world" do
-        insist { subject["hello"] } == "world"
-        insist { subject["whoa"] } == "fancypants"
+        insist { subject.get("hello") } == "world"
+        insist { subject.get("whoa") } == "fancypants"
       end
     end
 
@@ -374,7 +314,7 @@ describe LogStash::Filters::KV do
       CONFIG
 
       sample "this is not key value" do
-        reject { subject["whoa"] } == "fancypants"
+        reject { subject.get("whoa") } == "fancypants"
       end
     end
   end
@@ -388,12 +328,12 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["kv"]["hello"] } == "world"
-      insist { subject["kv"]["foo"] } == "bar"
-      insist { subject["kv"]["baz"] } == "fizz"
-      insist { subject["kv"]["doublequoted"] } == "hello world"
-      insist { subject["kv"]["singlequoted"] } == "hello world"
-      insist {subject["kv"].count } == 5
+      insist { subject.get("kv")["hello"] } == "world"
+      insist { subject.get("kv")["foo"] } == "bar"
+      insist { subject.get("kv")["baz"] } == "fizz"
+      insist { subject.get("kv")["doublequoted"] } == "hello world"
+      insist { subject.get("kv")["singlequoted"] } == "hello world"
+      insist {subject.get("kv").count } == 5
     end
 
   end
@@ -406,7 +346,7 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello:world:foo:bar:baz:fizz" do
-      insist { subject["kv"] } == nil
+      insist { subject.get("kv") } == nil
     end
   end
 
@@ -420,11 +360,11 @@ describe LogStash::Filters::KV do
       }
     CONFIG
     sample("data" => "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'") do
-      insist { subject["hello"] } == "world"
-      insist { subject["foo"] } == "bar"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
-      insist { subject["singlequoted"] } == "hello world"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
+      insist { subject.get("singlequoted") } == "hello world"
     end
   end
 
@@ -437,11 +377,11 @@ describe LogStash::Filters::KV do
       }
     CONFIG
     sample({"@data" => "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'"}) do
-      insist { subject["hello"] } == "world"
-      insist { subject["foo"] } == "bar"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
-      insist { subject["singlequoted"] } == "hello world"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
+      insist { subject.get("singlequoted") } == "hello world"
     end
   end
 
@@ -456,12 +396,12 @@ describe LogStash::Filters::KV do
       }
     CONFIG
     sample("data" => "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'") do
-      insist { subject["kv"]["hello"] } == "world"
-      insist { subject["kv"]["foo"] } == "bar"
-      insist { subject["kv"]["baz"] } == "fizz"
-      insist { subject["kv"]["doublequoted"] } == "hello world"
-      insist { subject["kv"]["singlequoted"] } == "hello world"
-      insist { subject["kv"].count } == 5
+      insist { subject.get("kv")["hello"] } == "world"
+      insist { subject.get("kv")["foo"] } == "bar"
+      insist { subject.get("kv")["baz"] } == "fizz"
+      insist { subject.get("kv")["doublequoted"] } == "hello world"
+      insist { subject.get("kv")["singlequoted"] } == "hello world"
+      insist { subject.get("kv").count } == 5
     end
   end
 
@@ -475,8 +415,8 @@ describe LogStash::Filters::KV do
       }
     CONFIG
     sample "" do
-      insist { subject["non-exisiting-field"] } == nil
-      insist { subject["kv"] } == nil
+      insist { subject.get("non-exisiting-field") } == nil
+      insist { subject.get("kv") } == nil
     end
   end
 
@@ -490,8 +430,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["foo"] } == "bar"
-      insist { subject["singlequoted"] } == "hello world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("singlequoted") } == "hello world"
     end
   end
 
@@ -505,9 +445,9 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["hello"] } == "world"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
     end
   end
 
@@ -522,8 +462,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["__foo"] } == "bar"
-      insist { subject["__singlequoted"] } == "hello world"
+      insist { subject.get("__foo") } == "bar"
+      insist { subject.get("__singlequoted") } == "hello world"
     end
   end
 
@@ -538,9 +478,9 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["__hello"] } == "world"
-      insist { subject["__baz"] } == "fizz"
-      insist { subject["__doublequoted"] } == "hello world"
+      insist { subject.get("__hello") } == "world"
+      insist { subject.get("__baz") } == "fizz"
+      insist { subject.get("__doublequoted") } == "hello world"
     end
   end
 
@@ -555,8 +495,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample({"data" => "foo=bar baz=fizz", "key" => "foo"}) do
-      insist { subject["foo"] } == "bar"
-      insist { subject["baz"] } == nil
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("baz") } == nil
     end
   end
 
@@ -571,8 +511,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample({"data" => "foo=bar baz=fizz", "key" => "foo"}) do
-      insist { subject["foo"] } == nil
-      insist { subject["baz"] } == "fizz"
+      insist { subject.get("foo") } == nil
+      insist { subject.get("baz") } == "fizz"
     end
   end
 
@@ -605,12 +545,12 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample "hello=world foo=bar baz=fizz doublequoted=\"hello world\" singlequoted='hello world'" do
-      insist { subject["hello"] } == "world"
-      insist { subject["foo"] } == "bar"
-      insist { subject["goo"] } == "yyy"
-      insist { subject["baz"] } == "fizz"
-      insist { subject["doublequoted"] } == "hello world"
-      insist { subject["singlequoted"] } == "hello world"
+      insist { subject.get("hello") } == "world"
+      insist { subject.get("foo") } == "bar"
+      insist { subject.get("goo") } == "yyy"
+      insist { subject.get("baz") } == "fizz"
+      insist { subject.get("doublequoted") } == "hello world"
+      insist { subject.get("singlequoted") } == "hello world"
     end
   end
 
@@ -625,8 +565,8 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample("happy" => "foo=bar baz=fizz") do
-      insist { subject["[happy][foo]"] } == "bar"
-      insist { subject["[happy][baz]"] } == "fizz"
+      insist { subject.get("[happy][foo]") } == "bar"
+      insist { subject.get("[happy][baz]") } == "fizz"
     end
 
   end
@@ -643,7 +583,7 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample("source" => "foo=bar&foo=yeah&foo=yeah") do
-      insist { subject["[foo]"] } == ["bar", "yeah"]
+      insist { subject.get("[foo]") } == ["bar", "yeah"]
     end
   end
 
@@ -658,7 +598,7 @@ describe LogStash::Filters::KV do
     CONFIG
 
     sample("source" => "foo=bar&foo=yeah&foo=yeah") do
-      insist { subject["[foo]"] } == ["bar", "yeah", "yeah"]
+      insist { subject.get("[foo]") } == ["bar", "yeah", "yeah"]
     end
   end
 
@@ -683,8 +623,8 @@ describe LogStash::Filters::KV do
     context "key and splitters with no value" do
       it "should ignore the incomplete key/value pairs" do
         subject.filter(event)
-        expect(event["AccountStatus"]).to eq("4")
-        expect(event["IsSuccess"]).to eq("True")
+        expect(event.get("AccountStatus")).to eq("4")
+        expect(event.get("IsSuccess")).to eq("True")
         expect(event.to_hash.keys.sort).to eq(
           ["@timestamp", "@version", "AccountStatus", "IsSuccess", "message"])
       end

metadata

@@ -1,44 +1,46 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-kv
 version: !ruby/object:Gem::Version
-  version: 2.1.0
+  version: 3.0.0
 platform: ruby
 authors:
 - Elastic
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-05-20 00:00:00.000000000 Z
+date: 2016-05-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
+  name: logstash-core-plugin-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
-  name: logstash-core-plugin-api
-  prerelease: false
+        version: '2.0'
   type: :runtime
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
+  name: logstash-devutils
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-  name: logstash-devutils
-  prerelease: false
   type: :development
+  prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
+description: This gem is a Logstash plugin required to be installed on top of the
+  Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
+  gem is not a stand-alone program
 email: info@elastic.co
 executables: []
 extensions: []
@@ -59,7 +61,7 @@ licenses:
 metadata:
   logstash_plugin: 'true'
   logstash_group: filter
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -74,10 +76,11 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project:
-rubygems_version: 2.6.3
-signing_key:
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
 specification_version: 4
-summary: This filter helps automatically parse messages (or specific event fields) which are of the 'foo=bar' variety.
+summary: This filter helps automatically parse messages (or specific event fields)
+  which are of the 'foo=bar' variety.
 test_files:
 - spec/filters/kv_spec.rb