logstash-output-loganalytics 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ecd7903598f40592f66d67105c1722dde37404b65485db3fdbf070c82510608b
-  data.tar.gz: bc23be8507bba4d28105ae3af58ea993d6b3c1c8ce9a6058229cf7c6aebb986e
+  metadata.gz: 1e42bcd913718ac95939b864d050d3ac6ac89286ae63dc1b96eb13af0dada1f1
+  data.tar.gz: 5fd60780a81eaf8482e4cb4bfd51dfd5e716b4a02cf7aa13dd6fe0cf8f5c02af
 SHA512:
-  metadata.gz: 817a115933bbc78367636dd02dbe4af1f5b894cf74b799c70de80e982dc92e7829b3a717d693af05ec4bc047eca822cea5791ac7d237087ce71a76bda6ac7ad6
-  data.tar.gz: b54896e448febaeb48afe53503111c3d135c1349603a89dd7c66e86dc30e250a3e282595023194a07be8117eb4f78f4341446b44ba648c534b1baa3e330d76b9
+  metadata.gz: 71e115f3a2c9feb10a1a44fd0e7fbcbef6b5e1c2c0efbb3259909eec3205b62b623385f6e629e70b49d074a798c30b2a53752f4a3d824b759635e61cc48b65dc
+  data.tar.gz: 86d0f659d0ded7e622aaef9d9f5ce280e8df0e3e9480bf0142fa5a8de0464f2bf163232e8f8a271f5b777f3edfa030feae6c9e97ed8d7eba49ce61b56b2778e2

data/lib/logstash/outputs/loganalytics.rb

@@ -11,43 +11,50 @@ class LogStash::Outputs::Loganalytics < LogStash::Outputs::Base
   config_name "loganalytics"
 
   # Your Operations Management Suite workspace ID
-  config :customer_id, :validate => :string, :required => true
+  config :client_id, :validate => :string, :required => true
 
   # The primary or the secondary Connected Sources client authentication key
-  config :shared_key, :validate => :string, :required => true
+  config :client_secret, :validate => :string, :required => true
 
   # The name of the event type that is being submitted to Log Analytics. This must be only alpha characters.
-  config :log_type, :validate => :string, :required => true
+  config :table, :validate => :string, :required => true
 
   # The name of the time generated field. Be carefule that the value of field should strictly follow the ISO 8601 format (YYYY-MM-DDThh:mm:ssZ)
   config :time_generated_field, :validate => :string, :default => '', :required => false
 
   public
   def register
-  	raise ArgumentError, 'log_type must be only alpha characters and less than 100 characters' unless @log_type.match(/^[a-zA-Z]{1,100}$/)
-    @uri = "https://#{@customer_id}.ods.opinsights.azure.com/api/logs?api-version=2016-04-01"
+  	raise ArgumentError, 'log type must be only alpha characters and less than 100 characters' unless @table.match(/^[a-zA-Z]{1,100}$/)
+    @uri = "https://#{@client_id}.ods.opinsights.azure.com/api/logs?api-version=2016-04-01"
   end
 
   def receive(event)
     begin
       body =  event.to_json
+      #puts body
       date = Time.now.httpdate
+      #puts date
       string_to_hash = "POST\n#{body.bytesize}\napplication/json\nx-ms-date:#{date}\n/api/logs"
-      hashed_string = Base64.encode64(OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), Base64.decode64(@shared_key), string_to_hash.encode('utf-8')))
+      #puts string_to_hash
+      hashed_string = Base64.encode64(OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), Base64.decode64(@client_secret), string_to_hash.encode('utf-8')))
+      #puts hashed_string
       headers = {}
       headers['Content-Type'] = 'application/json'
-      headers['Authorization'] = "SharedKey #{@customer_id}:#{hashed_string}"
-      headers['Log-Type'] = @log_type
+      headers['Authorization'] = "SharedKey #{@client_id}:#{hashed_string}"
+      headers['Log-Type'] = @table
       headers['x-ms-date'] = date
       unless @time_generated_field.empty?
         headers['time-generated-field'] = @time_generated_field
       end
       response = RestClient.post(@uri, body, headers)
+      #puts response.code
       unless response.code == 200
-        $logger.error("DataCollector API request failure: error code: #{response.code}, data=>#{event}")
+        #puts "DataCollector API request failure: error code: #{response.code}, data=>#{event}"
+        @logger.error("DataCollector API request failure: error code: #{response.code}, data=>#{event}")
       end
     rescue Exception => ex
-      $logger.error("Exception occured in posting to DataCollector API: '#{ex}', data=>#{event}")
+      #puts "Exception occured in posting to DataCollector API: '#{ex}', data=>#{event}"
+      @logger.error("Exception occured in posting to DataCollector API: '#{ex}', data=>#{event}")
     end
   end
 

data/logstash-output-loganalytics.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name          = 'logstash-output-loganalytics'
-  s.version       = '0.1.0'
+  s.version       = '0.2.0'
   s.licenses      = ['Apache-2.0']
   s.summary       = 'Logstash output plugin for Azure Log Analytics.'
   s.description   = 'Logstash output plugin to send logs to Azure Log Analytics. Uses Log Analytics HTTP Data Collector API under the hood.'

data/spec/outputs/loganalytics_spec.rb

@@ -5,18 +5,35 @@ require "logstash/codecs/plain"
 require "logstash/event"
 
 describe LogStash::Outputs::Loganalytics do
-  let(:sample_event) { LogStash::Event.new }
-  let(:output) { LogStash::Outputs::Loganalytics.new }
+  let(:client_id) { 'test' }
+  let(:client_secret) { 'test' }
+  let(:table) { 'logstashplugintest' }
+
+  let(:cfg) {
+    { 
+      "client_id" => client_id, 
+      "client_secret" => client_secret,
+      "table" => table
+    }
+  }
+
+  let(:output) { LogStash::Outputs::Loganalytics.new(cfg) }
 
   before do
     output.register
   end
 
-  describe "receive message" do
-    subject { output.receive(sample_event) }
+  describe "#receive" do
+    it "Should successfully send the event to log analytics" do
+      log = {
+        :logid => "628cc9db-0aec-4423-83d2-c78c11bd9b94",
+        :message => "this is a test",
+        :level => "info"
+      }
 
-    it "returns a string" do
-      expect(subject).to eq("Event received")
+      event = LogStash::Event.new(log) 
+      expect {output.receive(event)}.to_not raise_error
     end
+
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-output-loganalytics
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Ryan Bartsch
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2018-11-24 00:00:00.000000000 Z
+date: 2018-11-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement