sumologic-query 1.3.1 → 1.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ee3064549af4cc950fcd9ff873bd9f1bb9940b4e6078bc45d9086973fbab1162
-  data.tar.gz: c16964c3af7afd22e6ebdb878bc00d22cb4b6ab55f6b4a6946c0db435856e128
+  metadata.gz: fff9b3ee00ddf6f3adfd2bb84fb8488068149fc8e7bfd94a3aa1b9854f7b74f2
+  data.tar.gz: 898d75c6c4ca00c9e78ef21301d1345ec4e2c3806f33a8554b485486f314214a
 SHA512:
-  metadata.gz: 2a8c9c6b61000afc3d3ba204215b054332c7efc001bb1fc0a3a349e161b2ac9f9f36b7794ca561b0564b6b3b56245bf8ed9f630a7fe57fdba086ddba4f94f7ce
-  data.tar.gz: 6466d1a6180686719d614022fc908db2a2a8949594192c41bdf87e1a8c4c3d6d93bf754e4ef00e4479467f15c2eee5b4f240086afc200ef78bfad1786444b427
+  metadata.gz: b9d264177ec993228a116d3c17f77cf1ac0b0e16c48d19a3de2b6b6502fcf9d89bfa90dc1046609f5819c18bcccb0a30eeb3c57b7ba00363a94f4e08f2705318
+  data.tar.gz: 252af2f57e025938cbe9607eb5ae32b23140d0e84bbc8c8ecaceb10c06110436e37a096c9c6d21480c2408cbfb3f29a5f322e71655622954c5c7fc5881ac959f

data/CHANGELOG.md

@@ -6,6 +6,14 @@
 
 
 
+## [1.3.2](https://github.com/patrick204nqh/sumologic-query/compare/v1.3.1...v1.3.2) (2025-11-16)
+
+<!-- Release notes generated using configuration in .github/release.yml at main -->
+
+
+
+**Full Changelog**: https://github.com/patrick204nqh/sumologic-query/compare/v1.3.1...v1.3.2
+
 # [1.2.0](https://github.com/patrick204nqh/sumologic-query/compare/v1.1.2...v1.2.0) (2025-11-14)
 
 

data/README.md

@@ -3,6 +3,7 @@
 > A lightweight Ruby CLI for querying Sumo Logic logs and metadata. Simple, fast, read-only access to your logs.
 
 [![Gem Version](https://badge.fury.io/rb/sumologic-query.svg)](https://badge.fury.io/rb/sumologic-query)
+[![Downloads](https://img.shields.io/gem/dt/sumologic-query.svg)](https://rubygems.org/gems/sumologic-query)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 ## Why This Tool?

data/lib/sumologic/interactive/fzf_viewer/config.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Sumologic
+  module Interactive
+    class FzfViewer
+      module Config
+        # Display configuration
+        TIME_WIDTH = 8
+        LEVEL_WIDTH = 7
+        SOURCE_WIDTH = 25
+        MESSAGE_PREVIEW_LENGTH = 80
+        SEARCHABLE_PADDING = 5
+
+        # Searchable field names
+        SEARCHABLE_FIELDS = %w[
+          _source
+          _sourcecategory
+          _sourcename
+          _collector
+          _sourcehost
+          region
+          _group
+          _tier
+          _view
+        ].freeze
+
+        # ANSI color codes
+        COLORS = {
+          red: "\e[31m",
+          yellow: "\e[33m",
+          cyan: "\e[36m",
+          gray: "\e[90m",
+          reset: "\e[0m"
+        }.freeze
+      end
+    end
+  end
+end

data/lib/sumologic/interactive/fzf_viewer/formatter.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+module Sumologic
+  module Interactive
+    class FzfViewer
+      module Formatter
+        module_function
+
+        def format_time(timestamp_ms)
+          return 'N/A' unless timestamp_ms
+
+          Time.at(timestamp_ms.to_i / 1000).strftime('%H:%M:%S')
+        end
+
+        def format_level(level)
+          level_str = level.to_s.upcase.ljust(Config::LEVEL_WIDTH)
+          colorize_level(level_str)
+        end
+
+        def colorize_level(level_str)
+          case level_str.strip
+          when 'ERROR', 'FATAL', 'CRITICAL'
+            "#{Config::COLORS[:red]}#{level_str}#{Config::COLORS[:reset]}"
+          when 'WARN', 'WARNING'
+            "#{Config::COLORS[:yellow]}#{level_str}#{Config::COLORS[:reset]}"
+          when 'INFO'
+            "#{Config::COLORS[:cyan]}#{level_str}#{Config::COLORS[:reset]}"
+          when 'DEBUG', 'TRACE'
+            "#{Config::COLORS[:gray]}#{level_str}#{Config::COLORS[:reset]}"
+          else
+            level_str
+          end
+        end
+
+        def sanitize(text)
+          text.to_s.gsub(/[\n\r\t]/, ' ').squeeze(' ')
+        end
+
+        def truncate(text, length)
+          text = text.to_s
+          text.length > length ? "#{text[0...(length - 3)]}..." : text
+        end
+
+        def pad(text, width)
+          text.ljust(width)
+        end
+      end
+    end
+  end
+end

data/lib/sumologic/interactive/fzf_viewer/fzf_config.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+
+module Sumologic
+  module Interactive
+    class FzfViewer
+      module FzfConfig
+        module_function
+
+        def build_fzf_args(input_path, preview_path, header_text)
+          [
+            'fzf',
+            *search_options,
+            *display_options(preview_path, header_text),
+            *keybinding_options(input_path, preview_path)
+          ]
+        end
+
+        def search_options
+          [
+            '--ansi',
+            '--multi',
+            '--exact',       # Exact substring matching
+            '-i',            # Case-insensitive
+            '--no-hscroll'   # Prevent horizontal scrolling
+          ]
+        end
+
+        def display_options(preview_path, header_text)
+          [
+            "--header=#{header_text}",
+            "--preview=#{build_preview_command(preview_path)}",
+            '--preview-window=right:60%:wrap:follow',
+            '--height=100%'
+          ]
+        end
+
+        def keybinding_options(input_path, preview_path)
+          [
+            '--bind=enter:toggle',
+            "--bind=tab:execute(#{build_view_command(preview_path)})",
+            '--bind=ctrl-a:select-all',
+            '--bind=ctrl-d:deselect-all',
+            '--bind=ctrl-s:execute-silent(echo {+} > sumo-selected.txt)+abort',
+            '--bind=ctrl-y:execute-silent(echo {+} | pbcopy || ' \
+            'echo {+} | xclip -selection clipboard 2>/dev/null)+abort',
+            '--bind=ctrl-e:execute-silent(echo {+} > sumo-export.jsonl)+abort',
+            '--bind=ctrl-/:toggle-preview',
+            "--bind=ctrl-r:reload(cat #{input_path})",
+            '--bind=ctrl-t:toggle-search',
+            '--bind=ctrl-q:abort'
+          ]
+        end
+
+        def build_view_command(preview_path)
+          # FZF {n} is 0-indexed, sed is 1-indexed
+          'LINE=$(({n} + 1)); ' \
+            "sed -n \"$LINE\"p #{Shellwords.escape(preview_path)} | jq -C . | less -R"
+        end
+
+        def build_preview_command(preview_path)
+          escaped_path = Shellwords.escape(preview_path)
+
+          calc = "LINE=$(({n} + 1)); TOTAL=$(wc -l < #{escaped_path}); "
+          display = 'echo "Message $LINE of $TOTAL"; echo ""; '
+          extract = "sed -n \"$LINE\"p #{escaped_path}"
+
+          "#{calc}#{display}#{extract} | jq -C . || #{extract}"
+        end
+      end
+    end
+  end
+end

data/lib/sumologic/interactive/fzf_viewer/header_builder.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+module Sumologic
+  module Interactive
+    class FzfViewer
+      module HeaderBuilder
+        module_function
+
+        def build_header_text(results, messages)
+          [
+            build_column_headers,
+            build_info_line(results, messages),
+            build_search_tips,
+            build_keybindings_help
+          ].join("\n")
+        end
+
+        def build_column_headers
+          "#{Formatter.pad('TIME', Config::TIME_WIDTH)} " \
+            "#{Formatter.pad('LEVEL', Config::LEVEL_WIDTH)} " \
+            "#{Formatter.pad('SOURCE', Config::SOURCE_WIDTH)} MESSAGE"
+        end
+
+        def build_info_line(results, messages)
+          query = results['query'] || 'N/A'
+          count = messages.size
+          sources = messages.map { |m| m['map']['_source'] }.compact.uniq.size
+
+          "#{count} msgs | #{sources} sources | Query: #{Formatter.truncate(query, 40)}"
+        end
+
+        def build_search_tips
+          '💡 Simple text search (case-insensitive) - searches all JSON fields and log content'
+        end
+
+        def build_keybindings_help
+          'Enter=select Tab=view Ctrl-T=toggle-search Ctrl-S=save Ctrl-Y=copy Ctrl-E=export Ctrl-Q=quit'
+        end
+      end
+    end
+  end
+end

data/lib/sumologic/interactive/fzf_viewer/searchable_builder.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Sumologic
+  module Interactive
+    class FzfViewer
+      module SearchableBuilder
+        module_function
+
+        def build_searchable_content(map)
+          parts = []
+
+          add_primary_content(parts, map)
+          add_standard_fields(parts, map)
+          add_custom_fields(parts, map)
+
+          parts.compact.join(' ')
+        end
+
+        def add_primary_content(parts, map)
+          parts << Formatter.sanitize(map['_raw'] || map['message'] || '')
+        end
+
+        def add_standard_fields(parts, map)
+          Config::SEARCHABLE_FIELDS.each do |field|
+            parts << map[field] if map[field]
+          end
+        end
+
+        def add_custom_fields(parts, map)
+          map.each do |key, value|
+            next if key.start_with?('_')
+            next if value.nil? || value.to_s.empty?
+
+            parts << "#{key}:#{value}"
+          end
+        end
+      end
+    end
+  end
+end

data/lib/sumologic/interactive/fzf_viewer.rb

@@ -4,13 +4,15 @@ require 'json'
 require 'tempfile'
 require 'time'
 require 'open3'
-require 'shellwords'
+require_relative 'fzf_viewer/config'
+require_relative 'fzf_viewer/formatter'
+require_relative 'fzf_viewer/searchable_builder'
+require_relative 'fzf_viewer/fzf_config'
+require_relative 'fzf_viewer/header_builder'
 
 module Sumologic
   module Interactive
     class FzfViewer
-      DELIMITER = '||'
-
       def initialize(results)
         @results = results
         @messages = results['messages'] || []
@@ -31,74 +33,56 @@ module Sumologic
 
       private
 
+      # ============================================================
+      # Data Preparation
+      # ============================================================
+
       def prepare_data(input_file, preview_file)
-        # Write data lines only (no header in file - handled by FZF --header)
+        write_input_file(input_file)
+        write_preview_file(preview_file)
+      end
+
+      def write_input_file(input_file)
         File.open(input_file, 'w') do |f|
-          @messages.each do |msg|
-            f.puts format_line(msg)
-          end
+          @messages.each { |msg| f.puts format_line(msg) }
         end
+      end
 
-        # Write JSONL for preview (one JSON per line, line numbers match input)
+      def write_preview_file(preview_file)
         File.open(preview_file, 'w') do |f|
-          @messages.each do |msg|
-            f.puts JSON.generate(msg['map'])
-          end
+          @messages.each { |msg| f.puts JSON.generate(msg['map']) }
         end
       end
 
+      # ============================================================
+      # Line Formatting
+      # ============================================================
+
       def format_line(msg)
         map = msg['map']
+        display = build_display_line(map)
+        searchable = SearchableBuilder.build_searchable_content(map)
 
-        time = format_time(map['_messagetime'])
-        level = format_level(map['level'] || map['severity'] || 'INFO')
-        source = truncate(map['_sourceCategory'] || '-', 25)
-        message = truncate(sanitize(map['_raw'] || map['message'] || ''), 80)
-
-        # No index in display - use FZF line number instead
-        "#{time} #{level} #{source.ljust(25)} #{message}"
+        "#{display}#{' ' * Config::SEARCHABLE_PADDING}#{searchable}"
       end
 
-      def format_time(timestamp_ms)
-        return 'N/A' unless timestamp_ms
+      def build_display_line(map)
+        time = Formatter.format_time(map['_messagetime'])
+        level = Formatter.format_level(map['level'] || map['severity'] || 'INFO')
+        source = Formatter.truncate(map['_source'] || map['_sourcecategory'] || '-', Config::SOURCE_WIDTH)
+        message = Formatter.truncate(Formatter.sanitize(map['_raw'] || map['message'] || ''), Config::MESSAGE_PREVIEW_LENGTH)
 
-        Time.at(timestamp_ms.to_i / 1000).strftime('%H:%M:%S')
+        "#{time} #{level} #{source.ljust(Config::SOURCE_WIDTH)} #{message}"
       end
 
-      def format_level(level)
-        level_str = level.to_s.upcase.ljust(7)
-
-        case level_str.strip
-        when 'ERROR', 'FATAL', 'CRITICAL'
-          "\e[31m#{level_str}\e[0m"  # Red
-        when 'WARN', 'WARNING'
-          "\e[33m#{level_str}\e[0m"  # Yellow
-        when 'INFO'
-          "\e[36m#{level_str}\e[0m"  # Cyan
-        when 'DEBUG', 'TRACE'
-          "\e[90m#{level_str}\e[0m"  # Gray
-        else
-          level_str
-        end
-      end
-
-      def sanitize(text)
-        text.to_s.gsub(/[\n\r\t]/, ' ').squeeze(' ')
-      end
-
-      def truncate(text, length)
-        text = text.to_s
-        text.length > length ? "#{text[0...(length - 3)]}..." : text
-      end
-
-      def colorize_json(data)
-        JSON.pretty_generate(data)
-      end
+      # ============================================================
+      # FZF Execution
+      # ============================================================
 
       def execute_fzf(input_path, preview_path)
-        fzf_args = build_fzf_args(input_path, preview_path)
+        header_text = HeaderBuilder.build_header_text(@results, @messages)
+        fzf_args = FzfConfig.build_fzf_args(input_path, preview_path, header_text)
 
-        # Use IO.popen with array to avoid shell escaping issues
         result = IO.popen(fzf_args, 'r+') do |io|
           File.readlines(input_path).each { |line| io.puts line }
           io.close_write
@@ -108,70 +92,11 @@ module Sumologic
         result.strip
       end
 
-      def build_fzf_args(input_path, preview_path)
-        preview_cmd = build_preview_command(preview_path)
-        view_cmd = build_view_command(preview_path)
-        header_text = build_header_text
-
-        [
-          'fzf',
-          '--ansi',
-          '--multi',
-          "--header=#{header_text}",
-          "--preview=#{preview_cmd}",
-          '--preview-window=right:60%:wrap:follow',
-          '--bind=enter:toggle',
-          "--bind=tab:execute(#{view_cmd})",
-          '--bind=ctrl-a:select-all',
-          '--bind=ctrl-d:deselect-all',
-          '--bind=ctrl-s:execute-silent(echo {+} > sumo-selected.txt)+abort',
-          '--bind=ctrl-y:execute-silent(echo {+} | pbcopy || echo {+} | xclip -selection clipboard 2>/dev/null)+abort',
-          '--bind=ctrl-e:execute-silent(echo {+} > sumo-export.jsonl)+abort',
-          '--bind=ctrl-/:toggle-preview',
-          "--bind=ctrl-r:reload(cat #{input_path})",
-          '--bind=ctrl-q:abort',
-          '--height=100%'
-        ]
-      end
-
-      def build_view_command(preview_path)
-        # FZF {n} is 0-indexed! Add 1 to get sed line number (1-indexed)
-        'LINE=$(({n} + 1)); ' \
-          "sed -n \"$LINE\"p #{Shellwords.escape(preview_path)} | jq -C . | less -R"
-      end
-
-      def build_preview_command(preview_path)
-        # FZF {n} is 0-indexed! Add 1 to get JSONL line number (1-indexed)
-        escaped_path = Shellwords.escape(preview_path)
-        calc = "LINE=$(({n} + 1)); TOTAL=$(wc -l < #{escaped_path}); "
-        display = 'echo "Message $LINE of $TOTAL"; echo ""; '
-        extract = "sed -n \"$LINE\"p #{escaped_path}"
-
-        calc + display + "#{extract} | jq -C . || #{extract}"
-      end
-
-      def build_header_text
-        query = @results['query'] || 'N/A'
-        count = @messages.size
-        sources = @messages.map { |m| m['map']['_sourceCategory'] }.compact.uniq.size
-
-        # Column headers
-        columns = "#{pad('TIME', 8)} #{pad('LEVEL', 7)} #{pad('SOURCE', 25)} MESSAGE"
-        # Info and keys on second line
-        info = "#{count} msgs | #{sources} sources | Query: #{truncate(query, 40)}"
-        keys = 'Enter=select Tab=view Ctrl-S=save Ctrl-Y=copy Ctrl-E=export Ctrl-Q=quit'
-
-        "#{columns}\n#{info} | #{keys}"
-      end
-
-      def pad(text, width)
-        text.ljust(width)
-      end
+      # ============================================================
+      # Selection Handling
+      # ============================================================
 
       def handle_selection(selected)
-        # Selected contains the actual display lines (no index field)
-        # We don't show them since user already saw in FZF
-        # The keybindings (Ctrl-S, Ctrl-Y, Ctrl-E) handle the export
         return if selected.empty?
 
         puts "\n#{'═' * 80}"

data/lib/sumologic/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Sumologic
-  VERSION = '1.3.1'
+  VERSION = '1.3.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sumologic-query
 version: !ruby/object:Gem::Version
-  version: 1.3.1
+  version: 1.3.2
 platform: ruby
 authors:
 - patrick204nqh
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-11-15 00:00:00.000000000 Z
+date: 2025-11-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -104,6 +104,11 @@ files:
 - lib/sumologic/http/connection_pool.rb
 - lib/sumologic/interactive.rb
 - lib/sumologic/interactive/fzf_viewer.rb
+- lib/sumologic/interactive/fzf_viewer/config.rb
+- lib/sumologic/interactive/fzf_viewer/formatter.rb
+- lib/sumologic/interactive/fzf_viewer/fzf_config.rb
+- lib/sumologic/interactive/fzf_viewer/header_builder.rb
+- lib/sumologic/interactive/fzf_viewer/searchable_builder.rb
 - lib/sumologic/metadata/collector.rb
 - lib/sumologic/metadata/collector_source_fetcher.rb
 - lib/sumologic/metadata/source.rb