logstash-input-syslog 2.0.5 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 7b415d34a496e90e13c45686924f710b2ff2953d
4
- data.tar.gz: 5eab1ca7f3e8b0776955c68b087818206efb575f
3
+ metadata.gz: ea70c51553600b7e2cef7b04629fd640d475a8e0
4
+ data.tar.gz: a3f080382a3b4325ac3733912eddb2df02683b53
5
5
  SHA512:
6
- metadata.gz: d9d264b89497115f10fd521cf14eb2723def18b488a2731eccdca297f40e28f28057a85c539e0646035a4ff468d82363d0a29cb7634247b6da69c1a685377922
7
- data.tar.gz: 8ad21c3362ff67341077d0a133fce507570f01b67fb55427cf80c7599fbcf38ff469a9c79343e81bedd9b915f53908c964d56ab89649a49c87ae8f961a7b3d0e
6
+ metadata.gz: dcbec20bdf587e69259a138e2385dea1066ae744726cff25527e6839131b6ade3595ff0fe1035914e6e9f37555919f2bbd436dff7448bb5e1a3f837b209879ef
7
+ data.tar.gz: 12baf725da37045110aef3ea358e1d3300c676040e0537451b001c469af4890b1a3006a8c7247493a6b4aca27c7721e41517d90292d914a6e994e28b301eafc1
@@ -1,3 +1,5 @@
1
+ ## 3.0.0
2
+ - Update the plugin to the version 2.0 of the plugin api, this change is required for Logstash 5.0 compatibility. See https://github.com/elastic/logstash/issues/5141
1
3
  # 2.0.5
2
4
  - Temporary specs fix, see https://github.com/logstash-plugins/logstash-input-syslog/pull/25
3
5
  # 2.0.4
data/Gemfile CHANGED
@@ -1,2 +1,4 @@
1
1
  source 'https://rubygems.org'
2
- gemspec
2
+
3
+ # Specify your gem's dependencies in logstash-mass_effect.gemspec
4
+ gemspec
data/LICENSE CHANGED
@@ -1,4 +1,4 @@
1
- Copyright (c) 2012–2015 Elasticsearch <http://www.elastic.co>
1
+ Copyright (c) 2012–2016 Elasticsearch <http://www.elastic.co>
2
2
 
3
3
  Licensed under the Apache License, Version 2.0 (the "License");
4
4
  you may not use this file except in compliance with the License.
data/README.md CHANGED
@@ -1,7 +1,6 @@
1
1
  # Logstash Plugin
2
2
 
3
- [![Build
4
- Status](http://build-eu-00.elastic.co/view/LS%20Plugins/view/LS%20Inputs/job/logstash-plugin-input-syslog-unit/badge/icon)](http://build-eu-00.elastic.co/view/LS%20Plugins/view/LS%20Inputs/job/logstash-plugin-input-syslog-unit/)
3
+ [![Travis Build Status](https://travis-ci.org/logstash-plugins/logstash-input-syslog.svg)](https://travis-ci.org/logstash-plugins/logstash-input-syslog)
5
4
 
6
5
  This is a plugin for [Logstash](https://github.com/elastic/logstash).
7
6
 
@@ -56,7 +55,12 @@ gem "logstash-filter-awesome", :path => "/your/local/logstash-filter-awesome"
56
55
  ```
57
56
  - Install plugin
58
57
  ```sh
58
+ # Logstash 2.3 and higher
59
+ bin/logstash-plugin install --no-verify
60
+
61
+ # Prior to Logstash 2.3
59
62
  bin/plugin install --no-verify
63
+
60
64
  ```
61
65
  - Run Logstash with your plugin
62
66
  ```sh
@@ -74,7 +78,12 @@ gem build logstash-filter-awesome.gemspec
74
78
  ```
75
79
  - Install the plugin from the Logstash home
76
80
  ```sh
77
- bin/plugin install /your/local/plugin/logstash-filter-awesome.gem
81
+ # Logstash 2.3 and higher
82
+ bin/logstash-plugin install --no-verify
83
+
84
+ # Prior to Logstash 2.3
85
+ bin/plugin install --no-verify
86
+
78
87
  ```
79
88
  - Start Logstash and proceed to test the plugin
80
89
 
@@ -182,7 +182,7 @@ class LogStash::Inputs::Syslog < LogStash::Inputs::Base
182
182
  def decode(host, output_queue, data)
183
183
  @codec.decode(data) do |event|
184
184
  decorate(event)
185
- event["host"] = host
185
+ event.set("host", host)
186
186
  syslog_relay(event)
187
187
  output_queue << event
188
188
  end
@@ -225,40 +225,40 @@ class LogStash::Inputs::Syslog < LogStash::Inputs::Base
225
225
  def syslog_relay(event)
226
226
  @grok_filter.filter(event)
227
227
 
228
- if event["tags"].nil? || !event["tags"].include?(@grok_filter.tag_on_failure)
228
+ if event.get("tags").nil? || !event.get("tags").include?(@grok_filter.tag_on_failure)
229
229
  # Per RFC3164, priority = (facility * 8) + severity
230
230
  # = (facility << 3) & (severity)
231
- priority = event["priority"].to_i rescue 13
231
+ priority = event.get("priority").to_i rescue 13
232
232
  severity = priority & 7 # 7 is 111 (3 bits)
233
233
  facility = priority >> 3
234
- event["priority"] = priority
235
- event["severity"] = severity
236
- event["facility"] = facility
234
+ event.set("priority", priority)
235
+ event.set("severity", severity)
236
+ event.set("facility", facility)
237
237
 
238
- event["timestamp"] = event["timestamp8601"] if event.include?("timestamp8601")
238
+ event.set("timestamp", event.get("timestamp8601")) if event.include?("timestamp8601")
239
239
  @date_filter.filter(event)
240
240
  else
241
- @logger.info? && @logger.info("NOT SYSLOG", :message => event["message"])
241
+ @logger.info? && @logger.info("NOT SYSLOG", :message => event.get("message"))
242
242
 
243
243
  # RFC3164 says unknown messages get pri=13
244
244
  priority = 13
245
- event["priority"] = 13
246
- event["severity"] = 5 # 13 & 7 == 5
247
- event["facility"] = 1 # 13 >> 3 == 1
245
+ event.set("priority", 13)
246
+ event.set("severity", 5) # 13 & 7 == 5
247
+ event.set("facility", 1) # 13 >> 3 == 1
248
248
  end
249
249
 
250
250
  # Apply severity and facility metadata if
251
251
  # use_labels => true
252
252
  if @use_labels
253
- facility_number = event["facility"]
254
- severity_number = event["severity"]
253
+ facility_number = event.get("facility")
254
+ severity_number = event.get("severity")
255
255
 
256
256
  if @facility_labels[facility_number]
257
- event["facility_label"] = @facility_labels[facility_number]
257
+ event.set("facility_label", @facility_labels[facility_number])
258
258
  end
259
259
 
260
260
  if @severity_labels[severity_number]
261
- event["severity_label"] = @severity_labels[severity_number]
261
+ event.set("severity_label", @severity_labels[severity_number])
262
262
  end
263
263
  end
264
264
  end # def syslog_relay
@@ -1,10 +1,10 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-input-syslog'
4
- s.version = '2.0.5'
4
+ s.version = '3.0.0'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "Read syslog messages as events over the network."
7
- s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
7
+ s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
8
8
  s.authors = ["Elastic"]
9
9
  s.email = 'info@elastic.co'
10
10
  s.homepage = "http://www.elastic.co/guide/en/logstash/current/index.html"
@@ -20,7 +20,7 @@ Gem::Specification.new do |s|
20
20
  s.metadata = { "logstash_plugin" => "true", "logstash_group" => "input" }
21
21
 
22
22
  # Gem dependencies
23
- s.add_runtime_dependency "logstash-core-plugin-api", "~> 1.0"
23
+ s.add_runtime_dependency "logstash-core-plugin-api", "~> 2.0"
24
24
 
25
25
  s.add_runtime_dependency 'concurrent-ruby'
26
26
  s.add_runtime_dependency 'thread_safe'
@@ -53,9 +53,9 @@ describe LogStash::Inputs::Syslog do
53
53
 
54
54
  insist { events.length } == event_count
55
55
  events.each do |event|
56
- insist { event["priority"] } == 164
57
- insist { event["severity"] } == 4
58
- insist { event["facility"] } == 20
56
+ insist { event.get("priority") } == 164
57
+ insist { event.get("severity") } == 4
58
+ insist { event.get("facility") } == 20
59
59
  end
60
60
  end
61
61
 
@@ -83,7 +83,7 @@ describe LogStash::Inputs::Syslog do
83
83
 
84
84
  insist { events.length } == event_count
85
85
  event_count.times do |i|
86
- insist { events[i]["tags"] } == ["_grokparsefailure_sysloginput"]
86
+ insist { events[i].get("tags") } == ["_grokparsefailure_sysloginput"]
87
87
  end
88
88
  end
89
89
 
@@ -114,7 +114,7 @@ describe LogStash::Inputs::Syslog do
114
114
 
115
115
  insist { events.length } == event_count
116
116
  events.each do |event|
117
- insist { event["@timestamp"].to_iso8601 } == "#{Time.now.year}-10-26T15:19:25.000Z"
117
+ insist { event.get("@timestamp").to_iso8601 } == "#{Time.now.year}-10-26T15:19:25.000Z"
118
118
  end
119
119
  end
120
120
 
@@ -139,7 +139,7 @@ describe LogStash::Inputs::Syslog do
139
139
  end
140
140
 
141
141
  # chances platform timezone is not UTC so ignore the hours
142
- insist { event["@timestamp"].to_iso8601 } =~ /#{Time.now.year}-10-26T\d\d:19:25.000Z/
142
+ insist { event.get("@timestamp").to_iso8601 } =~ /#{Time.now.year}-10-26T\d\d:19:25.000Z/
143
143
  end
144
144
 
145
145
  it "should support non UTC timezone" do
@@ -150,7 +150,7 @@ describe LogStash::Inputs::Syslog do
150
150
 
151
151
  syslog_event = LogStash::Event.new({ "message" => "<164>Oct 26 15:19:25 1.2.3.4 %ASA-4-106023: Deny udp src DRAC:10.1.2.3/43434" })
152
152
  input.syslog_relay(syslog_event)
153
- insist { syslog_event["@timestamp"].to_iso8601 } == "#{Time.now.year}-10-26T20:19:25.000Z"
153
+ insist { syslog_event.get("@timestamp").to_iso8601 } == "#{Time.now.year}-10-26T20:19:25.000Z"
154
154
 
155
155
  input.close
156
156
  end
@@ -162,13 +162,13 @@ describe LogStash::Inputs::Syslog do
162
162
  # event which is not syslog should have a new tag
163
163
  event = LogStash::Event.new({ "message" => "hello world, this is not syslog RFC3164" })
164
164
  input.syslog_relay(event)
165
- insist { event["tags"] } == ["_grokparsefailure_sysloginput"]
165
+ insist { event.get("tags") } == ["_grokparsefailure_sysloginput"]
166
166
 
167
167
  syslog_event = LogStash::Event.new({ "message" => "<164>Oct 26 15:19:25 1.2.3.4 %ASA-4-106023: Deny udp src DRAC:10.1.2.3/43434" })
168
168
  input.syslog_relay(syslog_event)
169
- insist { syslog_event["priority"] } == 164
170
- insist { syslog_event["severity"] } == 4
171
- insist { syslog_event["tags"] } == nil
169
+ insist { syslog_event.get("priority") } == 164
170
+ insist { syslog_event.get("severity") } == 4
171
+ insist { syslog_event.get("tags") } == nil
172
172
 
173
173
  input.close
174
174
  end
metadata CHANGED
@@ -1,134 +1,136 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-input-syslog
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.0.5
4
+ version: 3.0.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Elastic
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2016-03-24 00:00:00.000000000 Z
11
+ date: 2016-05-06 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: logstash-core-plugin-api
15
- version_requirements: !ruby/object:Gem::Requirement
16
- requirements:
17
- - - ~>
18
- - !ruby/object:Gem::Version
19
- version: '1.0'
20
15
  requirement: !ruby/object:Gem::Requirement
21
16
  requirements:
22
- - - ~>
17
+ - - "~>"
23
18
  - !ruby/object:Gem::Version
24
- version: '1.0'
25
- prerelease: false
19
+ version: '2.0'
26
20
  type: :runtime
27
- - !ruby/object:Gem::Dependency
28
- name: concurrent-ruby
21
+ prerelease: false
29
22
  version_requirements: !ruby/object:Gem::Requirement
30
23
  requirements:
31
- - - '>='
24
+ - - "~>"
32
25
  - !ruby/object:Gem::Version
33
- version: '0'
26
+ version: '2.0'
27
+ - !ruby/object:Gem::Dependency
28
+ name: concurrent-ruby
34
29
  requirement: !ruby/object:Gem::Requirement
35
30
  requirements:
36
- - - '>='
31
+ - - ">="
37
32
  - !ruby/object:Gem::Version
38
33
  version: '0'
39
- prerelease: false
40
34
  type: :runtime
41
- - !ruby/object:Gem::Dependency
42
- name: thread_safe
35
+ prerelease: false
43
36
  version_requirements: !ruby/object:Gem::Requirement
44
37
  requirements:
45
- - - '>='
38
+ - - ">="
46
39
  - !ruby/object:Gem::Version
47
40
  version: '0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: thread_safe
48
43
  requirement: !ruby/object:Gem::Requirement
49
44
  requirements:
50
- - - '>='
45
+ - - ">="
51
46
  - !ruby/object:Gem::Version
52
47
  version: '0'
53
- prerelease: false
54
48
  type: :runtime
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - ">="
53
+ - !ruby/object:Gem::Version
54
+ version: '0'
55
55
  - !ruby/object:Gem::Dependency
56
56
  name: stud
57
- version_requirements: !ruby/object:Gem::Requirement
57
+ requirement: !ruby/object:Gem::Requirement
58
58
  requirements:
59
- - - '>='
59
+ - - ">="
60
60
  - !ruby/object:Gem::Version
61
61
  version: 0.0.22
62
- - - <
62
+ - - "<"
63
63
  - !ruby/object:Gem::Version
64
64
  version: 0.1.0
65
- requirement: !ruby/object:Gem::Requirement
65
+ type: :runtime
66
+ prerelease: false
67
+ version_requirements: !ruby/object:Gem::Requirement
66
68
  requirements:
67
- - - '>='
69
+ - - ">="
68
70
  - !ruby/object:Gem::Version
69
71
  version: 0.0.22
70
- - - <
72
+ - - "<"
71
73
  - !ruby/object:Gem::Version
72
74
  version: 0.1.0
73
- prerelease: false
74
- type: :runtime
75
75
  - !ruby/object:Gem::Dependency
76
76
  name: logstash-codec-plain
77
- version_requirements: !ruby/object:Gem::Requirement
78
- requirements:
79
- - - '>='
80
- - !ruby/object:Gem::Version
81
- version: '0'
82
77
  requirement: !ruby/object:Gem::Requirement
83
78
  requirements:
84
- - - '>='
79
+ - - ">="
85
80
  - !ruby/object:Gem::Version
86
81
  version: '0'
87
- prerelease: false
88
82
  type: :runtime
89
- - !ruby/object:Gem::Dependency
90
- name: logstash-filter-grok
83
+ prerelease: false
91
84
  version_requirements: !ruby/object:Gem::Requirement
92
85
  requirements:
93
- - - '>='
86
+ - - ">="
94
87
  - !ruby/object:Gem::Version
95
88
  version: '0'
89
+ - !ruby/object:Gem::Dependency
90
+ name: logstash-filter-grok
96
91
  requirement: !ruby/object:Gem::Requirement
97
92
  requirements:
98
- - - '>='
93
+ - - ">="
99
94
  - !ruby/object:Gem::Version
100
95
  version: '0'
101
- prerelease: false
102
96
  type: :runtime
103
- - !ruby/object:Gem::Dependency
104
- name: logstash-filter-date
97
+ prerelease: false
105
98
  version_requirements: !ruby/object:Gem::Requirement
106
99
  requirements:
107
- - - '>='
100
+ - - ">="
108
101
  - !ruby/object:Gem::Version
109
102
  version: '0'
103
+ - !ruby/object:Gem::Dependency
104
+ name: logstash-filter-date
110
105
  requirement: !ruby/object:Gem::Requirement
111
106
  requirements:
112
- - - '>='
107
+ - - ">="
113
108
  - !ruby/object:Gem::Version
114
109
  version: '0'
115
- prerelease: false
116
110
  type: :runtime
117
- - !ruby/object:Gem::Dependency
118
- name: logstash-devutils
111
+ prerelease: false
119
112
  version_requirements: !ruby/object:Gem::Requirement
120
113
  requirements:
121
- - - '>='
114
+ - - ">="
122
115
  - !ruby/object:Gem::Version
123
116
  version: '0'
117
+ - !ruby/object:Gem::Dependency
118
+ name: logstash-devutils
124
119
  requirement: !ruby/object:Gem::Requirement
125
120
  requirements:
126
- - - '>='
121
+ - - ">="
127
122
  - !ruby/object:Gem::Version
128
123
  version: '0'
129
- prerelease: false
130
124
  type: :development
131
- description: This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program
125
+ prerelease: false
126
+ version_requirements: !ruby/object:Gem::Requirement
127
+ requirements:
128
+ - - ">="
129
+ - !ruby/object:Gem::Version
130
+ version: '0'
131
+ description: This gem is a Logstash plugin required to be installed on top of the
132
+ Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
133
+ gem is not a stand-alone program
132
134
  email: info@elastic.co
133
135
  executables: []
134
136
  extensions: []
@@ -149,24 +151,24 @@ licenses:
149
151
  metadata:
150
152
  logstash_plugin: 'true'
151
153
  logstash_group: input
152
- post_install_message:
154
+ post_install_message:
153
155
  rdoc_options: []
154
156
  require_paths:
155
157
  - lib
156
158
  required_ruby_version: !ruby/object:Gem::Requirement
157
159
  requirements:
158
- - - '>='
160
+ - - ">="
159
161
  - !ruby/object:Gem::Version
160
162
  version: '0'
161
163
  required_rubygems_version: !ruby/object:Gem::Requirement
162
164
  requirements:
163
- - - '>='
165
+ - - ">="
164
166
  - !ruby/object:Gem::Version
165
167
  version: '0'
166
168
  requirements: []
167
- rubyforge_project:
168
- rubygems_version: 2.4.8
169
- signing_key:
169
+ rubyforge_project:
170
+ rubygems_version: 2.5.1
171
+ signing_key:
170
172
  specification_version: 4
171
173
  summary: Read syslog messages as events over the network.
172
174
  test_files: