logstash-filter-naxsi 0.9.0 → 0.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6a6c0e6c10d3871300429a20c8ac1073fb04f5cb
-  data.tar.gz: ddba81e78af44c33c1a761b3cfd55841b0a9c9fc
+  metadata.gz: bdf920409ffa8caf47c8e1107c4783697865f231
+  data.tar.gz: ec2b38005b782d2e784d6bb3751e29aa0a40037a
 SHA512:
-  metadata.gz: 0fcd5c784f64395c4b38141df6a00f6280bcaadaea9e1a02878541c709dc647bc05a2b8c176ff89778a02dd2cf7d897ea1956712087040a441ef479dd6209630
-  data.tar.gz: 21ed4914392513fe28649c06dc8885654a53c78ea6756dee164de388b2b8eb66d2eb6977c88d4438ece1c7a240b435ef534dd4df5d87c3995433c24eb09877a9
+  metadata.gz: 8eafb1231e504eb30d1b4aca6644219c7983cb39048ca8461c17edd4b9441f965a96ff571725e0d8f6c0941f5348c95d109f3156d163ce6a0ff0d1a33ec815b1
+  data.tar.gz: ae7544cb6772c36702a9f82010a1424bf021790e0ecfd527d03258fb8b20ffe691b9de316094c697bd0f479f51bcf55d82eda0ae844d11ca189fb3f103aac574

data/lib/logstash/filters/naxsi.rb

@@ -21,15 +21,17 @@ class LogStash::Filters::Naxsi < LogStash::Filters::Base
   public
   def filter(event)
 
+    event_hash = event.to_hash()
+
     # Get all of your idN keys from the event
-    ids = event.keys.select { |a| /id\d+/ =~ a }
+    ids = event_hash.keys.select { |a| /id\d+/ =~ a }
 
     ids.each do |id|
 
       new_event = LogStash::Event.new()
 
       # Copy all the keys that are not tied to the exceptions
-      event.keys.each do |key|
+      event_hash.keys.each do |key|
         next if /id\d+|score\d+|var_name\d+|zone\d+|cscore\d+/ =~ key
         new_event[key] = event[key]
       end
@@ -40,8 +42,8 @@ class LogStash::Filters::Naxsi < LogStash::Filters::Base
 
       # Add the properties for the exception
       ["id","score","var_name","zone","cscore"].each do |prop|
-        next if event.has_key?(prop + exception_num)
-        new_event[prop] = event[prop + exception_num]
+        next unless event_hash.has_key?(prop + exception_num)
+        new_event[prop] = event_hash[prop + exception_num]
       end
 
       # Create the new event

data/logstash-filter-naxsi.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'logstash-filter-naxsi'
-  s.version         = '0.9.0'
+  s.version         = '0.9.1'
   s.licenses = ['Apache License (2.0)']
   s.summary = "This filter plugin will split a naxsi event into multiple in conjunction with other filters."
   s.description = ""
@@ -20,4 +20,5 @@ Gem::Specification.new do |s|
   # Gem dependencies
   s.add_runtime_dependency "logstash-core", "< 2.0.0", ">= 1.4.0"
   s.add_development_dependency 'logstash-devutils'
+  s.add_development_dependency "concurrent-ruby", "0.9.1"
 end

data/spec/filters/naxsi_spec.rb

@@ -0,0 +1,30 @@
+# encoding: utf-8
+require 'spec_helper'
+require "logstash/filters/naxsi"
+
+describe LogStash::Filters::Naxsi do
+  describe "Split into multiple events" do
+    let(:config) do <<-CONFIG
+      filter {
+        naxsi {}
+      }
+    CONFIG
+    end
+
+    sample("message" => "some text", "id0" => "1", "id1" => "2") do
+      insist { subject.length } == 2
+      insist { subject[0]["id"] } == "1"
+      insist { subject[1]["id"] } == "2"
+    end
+
+    sample("message" => "some text", "id0" => "1", "id1" => "2") do
+      insist { subject.length } == 2
+      insist { subject[0]["message"] } == "some text"
+      insist { subject[1]["message"] } == "some text"
+    end
+
+    sample("message" => "some text", "id0" => "1", "id1" => "2", "cscore1" => "$SQL") do
+      insist { subject[1]["cscore"] } == "$SQL"
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-naxsi
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.9.1
 platform: ruby
 authors:
 - NextGxDx
@@ -44,6 +44,20 @@ dependencies:
     - - '>='
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.1
+  name: concurrent-ruby
+  prerelease: false
+  type: :development
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.1
 description: ''
 email: engineering@nextgxdx.com
 executables: []
@@ -55,7 +69,7 @@ files:
 - README.md
 - lib/logstash/filters/naxsi.rb
 - logstash-filter-naxsi.gemspec
-- spec/filters/naxsi.rb
+- spec/filters/naxsi_spec.rb
 - spec/spec_helper.rb
 homepage: https://github.org/nextgxdx/logstash-filter-naxsi
 licenses:
@@ -84,5 +98,5 @@ signing_key:
 specification_version: 4
 summary: This filter plugin will split a naxsi event into multiple in conjunction with other filters.
 test_files:
-- spec/filters/naxsi.rb
+- spec/filters/naxsi_spec.rb
 - spec/spec_helper.rb

data/spec/filters/naxsi.rb

@@ -1,19 +0,0 @@
-require 'spec_helper'
-require "logstash/filters/naxsi"
-
-describe LogStash::Filters::Naxsi do
-  describe "Split into multiple events" do
-    let(:config) do <<-CONFIG
-      filter {
-        naxsi {}
-      }
-    CONFIG
-    end
-
-    sample("message" => "some text", "id0" => "1", "id1" => "2") do
-      insist { subject.length } == 2
-      insist { subject[0]["id"] } == 1
-      insist { subject[1]["id"] } == 2
-    end
-  end
-end