logstash-filter-syslog_pri 3.0.2 → 3.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Gemfile +8 -1
- data/docs/index.asciidoc +85 -0
- data/logstash-filter-syslog_pri.gemspec +2 -2
- metadata +4 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0dfa21ec29ed49ce878e9d5e62ad9259c005f6e0
|
|
4
|
+
data.tar.gz: 5a4500bfa268f4b3ef4feb9855982e94c876a464
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 1e26686946b8acce13d9edf8eccc915ea60d885b93e590263aa2f9be5222707206b440e678faf289768360b122191be1a6863f227fbf7a8aab0c6dbdc0e10549
|
|
7
|
+
data.tar.gz: 450d1e9f23fb1b0a2e5f24f15920b944412bece282c0af4b356e15ef23858a535370e5b6341754faa96397c7f9b1a298ca2a0f666be118116db2979cdff67636
|
data/Gemfile
CHANGED
|
@@ -1,4 +1,11 @@
|
|
|
1
1
|
source 'https://rubygems.org'
|
|
2
2
|
|
|
3
|
-
# Specify your gem's dependencies in logstash-mass_effect.gemspec
|
|
4
3
|
gemspec
|
|
4
|
+
|
|
5
|
+
logstash_path = ENV["LOGSTASH_PATH"] || "../../logstash"
|
|
6
|
+
use_logstash_source = ENV["LOGSTASH_SOURCE"] && ENV["LOGSTASH_SOURCE"].to_s == "1"
|
|
7
|
+
|
|
8
|
+
if Dir.exist?(logstash_path) && use_logstash_source
|
|
9
|
+
gem 'logstash-core', :path => "#{logstash_path}/logstash-core"
|
|
10
|
+
gem 'logstash-core-plugin-api', :path => "#{logstash_path}/logstash-core-plugin-api"
|
|
11
|
+
end
|
data/docs/index.asciidoc
ADDED
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
:plugin: syslog_pri
|
|
2
|
+
:type: filter
|
|
3
|
+
|
|
4
|
+
///////////////////////////////////////////
|
|
5
|
+
START - GENERATED VARIABLES, DO NOT EDIT!
|
|
6
|
+
///////////////////////////////////////////
|
|
7
|
+
:version: %VERSION%
|
|
8
|
+
:release_date: %RELEASE_DATE%
|
|
9
|
+
:changelog_url: %CHANGELOG_URL%
|
|
10
|
+
:include_path: ../../../../logstash/docs/include
|
|
11
|
+
///////////////////////////////////////////
|
|
12
|
+
END - GENERATED VARIABLES, DO NOT EDIT!
|
|
13
|
+
///////////////////////////////////////////
|
|
14
|
+
|
|
15
|
+
[id="plugins-{type}-{plugin}"]
|
|
16
|
+
|
|
17
|
+
=== Syslog_pri filter plugin
|
|
18
|
+
|
|
19
|
+
include::{include_path}/plugin_header.asciidoc[]
|
|
20
|
+
|
|
21
|
+
==== Description
|
|
22
|
+
|
|
23
|
+
Filter plugin for logstash to parse the `PRI` field from the front
|
|
24
|
+
of a Syslog (RFC3164) message. If no priority is set, it will
|
|
25
|
+
default to 13 (per RFC).
|
|
26
|
+
|
|
27
|
+
This filter is based on the original `syslog.rb` code shipped
|
|
28
|
+
with logstash.
|
|
29
|
+
|
|
30
|
+
[id="plugins-{type}s-{plugin}-options"]
|
|
31
|
+
==== Syslog_pri Filter Configuration Options
|
|
32
|
+
|
|
33
|
+
This plugin supports the following configuration options plus the <<plugins-{type}s-{plugin}-common-options>> described later.
|
|
34
|
+
|
|
35
|
+
[cols="<,<,<",options="header",]
|
|
36
|
+
|=======================================================================
|
|
37
|
+
|Setting |Input type|Required
|
|
38
|
+
| <<plugins-{type}s-{plugin}-facility_labels>> |<<array,array>>|No
|
|
39
|
+
| <<plugins-{type}s-{plugin}-severity_labels>> |<<array,array>>|No
|
|
40
|
+
| <<plugins-{type}s-{plugin}-syslog_pri_field_name>> |<<string,string>>|No
|
|
41
|
+
| <<plugins-{type}s-{plugin}-use_labels>> |<<boolean,boolean>>|No
|
|
42
|
+
|=======================================================================
|
|
43
|
+
|
|
44
|
+
Also see <<plugins-{type}s-{plugin}-common-options>> for a list of options supported by all
|
|
45
|
+
filter plugins.
|
|
46
|
+
|
|
47
|
+
|
|
48
|
+
|
|
49
|
+
[id="plugins-{type}s-{plugin}-facility_labels"]
|
|
50
|
+
===== `facility_labels`
|
|
51
|
+
|
|
52
|
+
* Value type is <<array,array>>
|
|
53
|
+
* Default value is `["kernel", "user-level", "mail", "daemon", "security/authorization", "syslogd", "line printer", "network news", "uucp", "clock", "security/authorization", "ftp", "ntp", "log audit", "log alert", "clock", "local0", "local1", "local2", "local3", "local4", "local5", "local6", "local7"]`
|
|
54
|
+
|
|
55
|
+
Labels for facility levels. This comes from RFC3164.
|
|
56
|
+
|
|
57
|
+
[id="plugins-{type}s-{plugin}-severity_labels"]
|
|
58
|
+
===== `severity_labels`
|
|
59
|
+
|
|
60
|
+
* Value type is <<array,array>>
|
|
61
|
+
* Default value is `["emergency", "alert", "critical", "error", "warning", "notice", "informational", "debug"]`
|
|
62
|
+
|
|
63
|
+
Labels for severity levels. This comes from RFC3164.
|
|
64
|
+
|
|
65
|
+
[id="plugins-{type}s-{plugin}-syslog_pri_field_name"]
|
|
66
|
+
===== `syslog_pri_field_name`
|
|
67
|
+
|
|
68
|
+
* Value type is <<string,string>>
|
|
69
|
+
* Default value is `"syslog_pri"`
|
|
70
|
+
|
|
71
|
+
Name of field which passes in the extracted PRI part of the syslog message
|
|
72
|
+
|
|
73
|
+
[id="plugins-{type}s-{plugin}-use_labels"]
|
|
74
|
+
===== `use_labels`
|
|
75
|
+
|
|
76
|
+
* Value type is <<boolean,boolean>>
|
|
77
|
+
* Default value is `true`
|
|
78
|
+
|
|
79
|
+
set the status to experimental/beta/stable
|
|
80
|
+
Add human-readable names after parsing severity and facility from PRI
|
|
81
|
+
|
|
82
|
+
|
|
83
|
+
|
|
84
|
+
[id="plugins-{type}s-{plugin}-common-options"]
|
|
85
|
+
include::{include_path}/{type}.asciidoc[]
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-filter-syslog_pri'
|
|
4
|
-
s.version = '3.0.
|
|
4
|
+
s.version = '3.0.3'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "Filter plugin for logstash to parse the PRI field from the front of a Syslog (RFC3164) message"
|
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
|
@@ -11,7 +11,7 @@ Gem::Specification.new do |s|
|
|
|
11
11
|
s.require_paths = ["lib"]
|
|
12
12
|
|
|
13
13
|
# Files
|
|
14
|
-
s.files = Dir[
|
|
14
|
+
s.files = Dir["lib/**/*","spec/**/*","*.gemspec","*.md","CONTRIBUTORS","Gemfile","LICENSE","NOTICE.TXT", "vendor/jar-dependencies/**/*.jar", "vendor/jar-dependencies/**/*.rb", "VERSION", "docs/**/*"]
|
|
15
15
|
|
|
16
16
|
# Tests
|
|
17
17
|
s.test_files = s.files.grep(%r{^(test|spec|features)/})
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: logstash-filter-syslog_pri
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 3.0.
|
|
4
|
+
version: 3.0.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Elastic
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2017-06-23 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -56,6 +56,7 @@ files:
|
|
|
56
56
|
- LICENSE
|
|
57
57
|
- NOTICE.TXT
|
|
58
58
|
- README.md
|
|
59
|
+
- docs/index.asciidoc
|
|
59
60
|
- lib/logstash/filters/syslog_pri.rb
|
|
60
61
|
- logstash-filter-syslog_pri.gemspec
|
|
61
62
|
- spec/filters/syslog_pri_spec.rb
|
|
@@ -82,7 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
82
83
|
version: '0'
|
|
83
84
|
requirements: []
|
|
84
85
|
rubyforge_project:
|
|
85
|
-
rubygems_version: 2.
|
|
86
|
+
rubygems_version: 2.4.8
|
|
86
87
|
signing_key:
|
|
87
88
|
specification_version: 4
|
|
88
89
|
summary: Filter plugin for logstash to parse the PRI field from the front of a Syslog (RFC3164) message
|