logstash-filter-metaevent 0.1.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 7fe9ccea158891a8bae7ad9be96b173ec19a5386
+  data.tar.gz: ff4c762016fcc44d69875649dffca1252b5e10d2
+SHA512:
+  metadata.gz: 4b068b5adcb8377b294cdbb08b43280a880f96e8923869f5e84902598c320350ed8ecac8c1461401588555a6f2f14da0e4ffbaa607992a9dadafc0e9d980337b
+  data.tar.gz: 439274eb2a3b86d6d4693478209b84f0ccc985e5ceb536ae61fa6c4c0655c67a4396891f9ea91a677a7159bbe9e769cef07cf70815516192a9b86321079ad561

data/.gitignore

@@ -0,0 +1,4 @@
+*.gem
+Gemfile.lock
+.bundle
+vendor

data/Gemfile

@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+gemspec
+gem "logstash", :github => "elasticsearch/logstash", :branch => "1.5"

data/LICENSE

@@ -0,0 +1,13 @@
+Copyright (c) 2012-2014 Elasticsearch <http://www.elasticsearch.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

data/Rakefile

@@ -0,0 +1,7 @@
+@files=[]
+
+task :default do
+  system("rake -T")
+end
+
+require "logstash/devutils/rake"

data/lib/logstash/filters/metaevent.rb

@@ -0,0 +1,69 @@
+# encoding: utf-8
+require "logstash/filters/base"
+require "logstash/namespace"
+
+
+class LogStash::Filters::Metaevent < LogStash::Filters::Base
+  config_name "metaevent"
+  milestone 1
+
+  # syntax: `followed_by_tags => [ "tag", "tag" ]`
+  config :followed_by_tags, :validate => :array, :required => true
+
+  # syntax: `period => 60`
+  config :period, :validate => :number, :default => 5
+
+  def register
+    @logger.debug("registering")
+    @metaevents = []
+  end
+
+  def filter(event)
+    if filter?(event)
+      start_period(event)
+    elsif within_period(event)
+      if followed_by_tags_match(event)
+        trigger(event)
+      else
+        @logger.debug(["metaevent", @add_tag, "ignoring (tags don't match)", event])
+      end
+    else
+      @logger.debug(["metaevent", @add_tag, "ignoring (not in period)", event])
+    end
+  end
+
+  def flush
+    return if @metaevents.empty?
+
+    new_events = @metaevents
+    @metaevents = []
+    new_events
+  end
+
+  private
+
+  def start_period(event)
+    @logger.debug(["metaevent", @add_tag, "start_period", event])
+    @start_event = event
+  end
+
+  def trigger(event)
+    @logger.debug(["metaevent", @add_tag, "trigger", event])
+
+    event = LogStash::Event.new
+    event["source"] = Socket.gethostname
+    event["tags"] = [@add_tag]
+
+    @metaevents << event
+    @start_event = nil
+  end
+
+  def followed_by_tags_match(event)
+    (event["tags"] & @followed_by_tags).size == @followed_by_tags.size
+  end
+
+  def within_period(event)
+    time_delta = event["@timestamp"] - @start_event["@timestamp"]
+    time_delta >= 0 && time_delta <= @period
+  end
+end

data/logstash-filter-metaevent.gemspec

@@ -0,0 +1,27 @@
+Gem::Specification.new do |s|
+
+  s.name            = 'logstash-filter-metaevent'
+  s.version         = '0.1.2'
+  s.licenses        = ['Apache License (2.0)']
+  s.summary         = "Metaevent plugin from contrib"
+  s.description     = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
+  s.authors         = ["Elasticsearch"]
+  s.email           = 'info@elasticsearch.com'
+  s.homepage        = "http://www.elasticsearch.org/guide/en/logstash/current/index.html"
+  s.require_paths = ["lib"]
+
+  # Files
+  s.files = `git ls-files`.split($\)+::Dir.glob('vendor/*')
+
+  # Tests
+  s.test_files = s.files.grep(%r{^(test|spec|features)/})
+
+  # Special flag to let us know this is actually a logstash plugin
+  s.metadata = { "logstash_plugin" => "true", "logstash_group" => "filter" }
+
+  # Gem dependencies
+  s.add_runtime_dependency 'logstash', '>= 1.4.0', '< 2.0.0'
+
+  s.add_development_dependency 'logstash-devutils'
+end
+

data/spec/filters/metaevent_spec.rb

@@ -0,0 +1,8 @@
+require "logstash/devutils/rspec/spec_helper"
+require 'logstash/filters/metaevent'
+
+describe LogStash::Filters::Metaevent do
+  it 'tries to register the plugin' do
+    expect(LogStash::Filters::Metaevent.new({ "followed_by_tags" => "abc" }).register).to eq([])
+  end
+end

metadata

@@ -0,0 +1,87 @@
+--- !ruby/object:Gem::Specification
+name: logstash-filter-metaevent
+version: !ruby/object:Gem::Version
+  version: 0.1.2
+platform: ruby
+authors:
+- Elasticsearch
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2014-11-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: logstash
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+    - - <
+      - !ruby/object:Gem::Version
+        version: 2.0.0
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+    - - <
+      - !ruby/object:Gem::Version
+        version: 2.0.0
+  prerelease: false
+  type: :runtime
+- !ruby/object:Gem::Dependency
+  name: logstash-devutils
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  prerelease: false
+  type: :development
+description: This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program
+email: info@elasticsearch.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- LICENSE
+- Rakefile
+- lib/logstash/filters/metaevent.rb
+- logstash-filter-metaevent.gemspec
+- spec/filters/metaevent_spec.rb
+homepage: http://www.elasticsearch.org/guide/en/logstash/current/index.html
+licenses:
+- Apache License (2.0)
+metadata:
+  logstash_plugin: 'true'
+  logstash_group: filter
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project:
+rubygems_version: 2.4.4
+signing_key:
+specification_version: 4
+summary: Metaevent plugin from contrib
+test_files:
+- spec/filters/metaevent_spec.rb