logstash-input-syslog 3.2.0 → 3.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2fe0893137a0245978babee198d6058ac7c42fbd
-  data.tar.gz: 941c695bfa50167e2669153fd9ff333ff56d1b46
+  metadata.gz: 5ab62b38146cd6161b27b1dde13685ab1a5c7641
+  data.tar.gz: 5a31a61d474921b4e59871c5cdd733933d71cde1
 SHA512:
-  metadata.gz: 2e7d1259985f95876b4b1f7abf60b45a301c5dd0279cd33c26c847a96033a58f203099160a6317312d8cf66140fd0b9179c5ae359f5f334cf7f5e46dc9d98fb1
-  data.tar.gz: 9aed2bba11e0962fc36d30d19a6a44654bcb1dd26194e1f990d98a51c19224c46f0f6954a13af655bf2542fbe1132657ca3da36063187fba8f00dfd8144ac7d7
+  metadata.gz: 9940fbc0acbfa256364d66a129d4743a4a24a918bd851496888e641e4db80a440b5a27bdc9b3818d75b7a2623c31c57e117d5534570f3381ff9cab4984c4bc3e
+  data.tar.gz: a4ae33bf538290a43157ce7672cb4102c3e78cbb6797cc48155dcbe32112f8333d67968dbf05b9131bd87c90d744fbf42b3aa2be3ac07bb8ca78f0f2dceb4ed2

data/Gemfile

@@ -1,4 +1,11 @@
 source 'https://rubygems.org'
 
-# Specify your gem's dependencies in logstash-mass_effect.gemspec
 gemspec
+
+logstash_path = ENV["LOGSTASH_PATH"] || "../../logstash"
+use_logstash_source = ENV["LOGSTASH_SOURCE"] && ENV["LOGSTASH_SOURCE"].to_s == "1"
+
+if Dir.exist?(logstash_path) && use_logstash_source
+  gem 'logstash-core', :path => "#{logstash_path}/logstash-core"
+  gem 'logstash-core-plugin-api', :path => "#{logstash_path}/logstash-core-plugin-api"
+end

data/docs/index.asciidoc

@@ -0,0 +1,144 @@
+:plugin: syslog
+:type: input
+
+///////////////////////////////////////////
+START - GENERATED VARIABLES, DO NOT EDIT!
+///////////////////////////////////////////
+:version: %VERSION%
+:release_date: %RELEASE_DATE%
+:changelog_url: %CHANGELOG_URL%
+:include_path: ../../../../logstash/docs/include
+///////////////////////////////////////////
+END - GENERATED VARIABLES, DO NOT EDIT!
+///////////////////////////////////////////
+
+[id="plugins-{type}-{plugin}"]
+
+=== Syslog input plugin
+
+include::{include_path}/plugin_header.asciidoc[]
+
+==== Description
+
+Read syslog messages as events over the network.
+
+This input is a good choice if you already use syslog today.
+It is also a good choice if you want to receive logs from
+appliances and network devices where you cannot run your own
+log collector.
+
+Of course, 'syslog' is a very muddy term. This input only supports `RFC3164`
+syslog with some small modifications. The date format is allowed to be
+`RFC3164` style or `ISO8601`. Otherwise the rest of `RFC3164` must be obeyed.
+If you do not use `RFC3164`, do not use this input.
+
+For more information see the http://www.ietf.org/rfc/rfc3164.txt[RFC3164 page].
+
+Note: This input will start listeners on both TCP and UDP.
+
+
+[id="plugins-{type}s-{plugin}-options"]
+==== Syslog Input Configuration Options
+
+This plugin supports the following configuration options plus the <<plugins-{type}s-{plugin}-common-options>> described later.
+
+[cols="<,<,<",options="header",]
+|=======================================================================
+|Setting |Input type|Required
+| <<plugins-{type}s-{plugin}-facility_labels>> |<<array,array>>|No
+| <<plugins-{type}s-{plugin}-host>> |<<string,string>>|No
+| <<plugins-{type}s-{plugin}-locale>> |<<string,string>>|No
+| <<plugins-{type}s-{plugin}-port>> |<<number,number>>|No
+| <<plugins-{type}s-{plugin}-proxy_protocol>> |<<boolean,boolean>>|No
+| <<plugins-{type}s-{plugin}-severity_labels>> |<<array,array>>|No
+| <<plugins-{type}s-{plugin}-timezone>> |<<string,string>>|No
+| <<plugins-{type}s-{plugin}-use_labels>> |<<boolean,boolean>>|No
+|=======================================================================
+
+Also see <<plugins-{type}s-{plugin}-common-options>> for a list of options supported by all
+input plugins.
+
+&nbsp;
+
+[id="plugins-{type}s-{plugin}-facility_labels"]
+===== `facility_labels` 
+
+  * Value type is <<array,array>>
+  * Default value is `["kernel", "user-level", "mail", "system", "security/authorization", "syslogd", "line printer", "network news", "UUCP", "clock", "security/authorization", "FTP", "NTP", "log audit", "log alert", "clock", "local0", "local1", "local2", "local3", "local4", "local5", "local6", "local7"]`
+
+Labels for facility levels. These are defined in RFC3164.
+
+[id="plugins-{type}s-{plugin}-host"]
+===== `host` 
+
+  * Value type is <<string,string>>
+  * Default value is `"0.0.0.0"`
+
+The address to listen on.
+
+[id="plugins-{type}s-{plugin}-locale"]
+===== `locale` 
+
+  * Value type is <<string,string>>
+  * There is no default value for this setting.
+
+Specify a locale to be used for date parsing using either IETF-BCP47 or POSIX language tag.
+Simple examples are `en`,`en-US` for BCP47 or `en_US` for POSIX.
+If not specified, the platform default will be used.
+
+The locale is mostly necessary to be set for parsing month names (pattern with MMM) and
+weekday names (pattern with EEE).
+
+
+[id="plugins-{type}s-{plugin}-port"]
+===== `port` 
+
+  * Value type is <<number,number>>
+  * Default value is `514`
+
+The port to listen on. Remember that ports less than 1024 (privileged
+ports) may require root to use.
+
+[id="plugins-{type}s-{plugin}-proxy_protocol"]
+===== `proxy_protocol` 
+
+  * Value type is <<boolean,boolean>>
+  * Default value is `false`
+
+Proxy protocol support, only v1 is supported at this time
+http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
+
+[id="plugins-{type}s-{plugin}-severity_labels"]
+===== `severity_labels` 
+
+  * Value type is <<array,array>>
+  * Default value is `["Emergency", "Alert", "Critical", "Error", "Warning", "Notice", "Informational", "Debug"]`
+
+Labels for severity levels. These are defined in RFC3164.
+
+[id="plugins-{type}s-{plugin}-timezone"]
+===== `timezone` 
+
+  * Value type is <<string,string>>
+  * There is no default value for this setting.
+
+Specify a time zone canonical ID to be used for date parsing.
+The valid IDs are listed on the [Joda.org available time zones page](http://joda-time.sourceforge.net/timezones.html).
+This is useful in case the time zone cannot be extracted from the value,
+and is not the platform default.
+If this is not specified the platform default will be used.
+Canonical ID is good as it takes care of daylight saving time for you
+For example, `America/Los_Angeles` or `Europe/France` are valid IDs.
+
+[id="plugins-{type}s-{plugin}-use_labels"]
+===== `use_labels` 
+
+  * Value type is <<boolean,boolean>>
+  * Default value is `true`
+
+Use label parsing for severity and facility levels.
+
+
+
+[id="plugins-{type}s-{plugin}-common-options"]
+include::{include_path}/{type}.asciidoc[]

data/lib/logstash/inputs/syslog.rb

@@ -141,7 +141,7 @@ class LogStash::Inputs::Syslog < LogStash::Inputs::Base
     @udp.bind(@host, @port)
 
     while !stop?
-      payload, client = @udp.recvfrom(9000)
+      payload, client = @udp.recvfrom(65507)
       metric.increment(:messages_received)
       decode(client[3], output_queue, payload)
     end

data/logstash-input-syslog.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-input-syslog'
-  s.version         = '3.2.0'
+  s.version         = '3.2.1'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "Read syslog messages as events over the network."
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
@@ -11,7 +11,7 @@ Gem::Specification.new do |s|
   s.require_paths = ["lib"]
 
   # Files
-  s.files = Dir['lib/**/*','spec/**/*','vendor/**/*','*.gemspec','*.md','CONTRIBUTORS','Gemfile','LICENSE','NOTICE.TXT']
+  s.files = Dir["lib/**/*","spec/**/*","*.gemspec","*.md","CONTRIBUTORS","Gemfile","LICENSE","NOTICE.TXT", "vendor/jar-dependencies/**/*.jar", "vendor/jar-dependencies/**/*.rb", "VERSION", "docs/**/*"]
 
   # Tests
   s.test_files = s.files.grep(%r{^(test|spec|features)/})

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-input-syslog
 version: !ruby/object:Gem::Version
-  version: 3.2.0
+  version: 3.2.1
 platform: ruby
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2016-11-21 00:00:00.000000000 Z
+date: 2017-06-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -146,6 +146,7 @@ files:
 - LICENSE
 - NOTICE.TXT
 - README.md
+- docs/index.asciidoc
 - lib/logstash/inputs/syslog.rb
 - logstash-input-syslog.gemspec
 - spec/inputs/syslog_spec.rb