ruby-splunk 0.0.2 → 0.0.3

data/lib/splunk.rb

@@ -28,7 +28,7 @@ class Splunk
           if field.has_key? "@k"
             case field["@k"]
             when '_raw'
-              rres[:"#{field["@k"]}"] = field["v"].to_s
+              rres[:"#{field["@k"]}"] = field["v"].to_s.gsub /<sgh="1">([^<]*)<\/sg>/, '\1'
             when '_si'
               # FIXME do nothing - we don't handle this yet
             else
@@ -36,7 +36,12 @@ class Splunk
               when '_time'
                 rres[:"#{field["@k"]}"] = Time.parse field["value"]["text"].to_s 
               else
-                rres[:"#{field["@k"]}"] = field["value"]["text"].to_s
+                if field["value"].instance_of? Array
+                  rres[:"#{field["@k"]}"] = Array.new unless rres[:"#{field["@k"]}"] 
+                  field["value"].each { |value| rres[:"#{field["@k"]}"] << value["text"].to_s }
+                else
+                  rres[:"#{field["@k"]}"] = field["value"]["text"].to_s
+                end
               end
             end
           end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby-splunk
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
   prerelease: 
 platform: ruby
 authors: