Skip to content

[WIP] - Refactor Lambda #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Dec 1, 2016
Merged

[WIP] - Refactor Lambda #18

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
d93ee6e
initial refactor
stevezau Nov 11, 2016
149eb34
cleanup regex and remove trailing \n
stevezau Nov 11, 2016
f20073a
add back logStream and logGroup for lambda app
stevezau Nov 17, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
169 changes: 102 additions & 67 deletions cloudwatchlogs/node.js/cloudwatchlogs_lambda.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,79 +2,114 @@
// Remember to change the hostname and path to match your collection API and specific HTTP-source endpoint
// See more at: https://help.sumologic.com/APIs/01Collector_Management_API
///////////////////////////////////////////////////////////////////////////////////////////////////////////
var sumoEndpoint = 'https://collectors.sumologic.com/receiver/v1/http/<XXX>'
var sumoEndpoint = 'https://collectors.sumologic.com/receiver/v1/http/<XXX>';

// Format used to parse out log formats
// Example: 2016-11-10T23:11:54.523Z 108af3bb-a79b-11e6-8bd7-91c363cc05d9 some message
var consoleFormatRegex = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}.\d{3}Z\t(\w+?-\w+?-\w+?-\w+?-\w+)\t(.*)/;

var https = require('https');
var zlib = require('zlib');
var url = require('url');

exports.handler = function(event, context) {
var urlObject = url.parse(sumoEndpoint);

var options = { 'hostname': urlObject.hostname,
'path': urlObject.pathname,
'method': 'POST'
};
exports.handler = function (event, context) {
var urlObject = url.parse(sumoEndpoint);

var options = {
'hostname': urlObject.hostname,
'path': urlObject.pathname,
'method': 'POST'
};

var zippedInput = new Buffer(event.awslogs.data, 'base64');

zlib.gunzip(zippedInput, function (e, buffer) {
if (e) {
context.fail(e);
}

var awslogsData = JSON.parse(buffer.toString('ascii'));
Copy link

@kumoroku kumoroku Nov 11, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is "ascii" the encoding? is that a safe assumption?

Copy link
Contributor Author

@stevezau stevezau Nov 11, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thing is, i didn't change it, that's how it was previously. should probably be utf8.

Copy link
Contributor

@duchatran duchatran Nov 14, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kumoroku : it's base64 first. After that it seems to be ascii: http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html#LambdaFunctionExample


if (awslogsData.messageType === "CONTROL_MESSAGE") {
console.log("Control message");
context.succeed("Success");
}

var requestsSent = 0;
var requestsFailed = 0;
var finalizeContext = function () {
var tot = requestsSent + requestsFailed;
if (tot == awslogsData.logEvents.length) {
if (requestsFailed > 0) {
context.fail(requestsFailed + " / " + tot + " events failed");
} else {
context.succeed(requestsSent + " requests sent");
}
}
};

// Used to extract RequestID
var requestIdRegex = /(?:RequestId:|Z)\s+([\w\d\-]+)/;
var lastRequestID = null;

var zippedInput = new Buffer(event.awslogs.data, 'base64');
awslogsData.logEvents.forEach(function (val, idx, arr) {
options.headers = {
'X-Sumo-Name': awslogsData.logStream,
'X-Sumo-Host': awslogsData.logGroup
};

zlib.gunzip(zippedInput, function(e, buffer) {
if (e) { context.fail(e); }
var req = https.request(options, function (res) {
var body = '';
console.log('Status:', res.statusCode);
res.setEncoding('utf8');
res.on('data', function (chunk) {
body += chunk;
});
res.on('end', function () {
console.log('Successfully processed HTTPS response');
requestsSent++;
finalizeContext();
});
});

Copy link
Contributor

@duchatran duchatran Nov 14, 2016 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@stevezau : we need to make logStream and logGroup on by default, otherwise data sent by this function will not be compatible with our Lambda app.

req.on('error', function (e) {
console.log(e.message);
requestsFailed++;
finalizeContext();
});

// Remove trailing \n
val.message = val.message.replace(/\n$/, '');

// Try extract requestID
var requestId = requestIdRegex.exec(val.message);
if (requestId !== null) {
lastRequestID = requestId[1];
}

// Attempt to detect console log and auto extract requestID and message
var consoleLog = consoleFormatRegex.exec(val.message);
if (consoleLog !== null) {
lastRequestID = consoleLog[1];
val.message = consoleLog[2].trim();
}

var awslogsData = JSON.parse(buffer.toString('ascii'));

console.log(awslogsData);

if (awslogsData.messageType === "CONTROL_MESSAGE") {
console.log("Control message");
context.succeed("Success");
}

var requestsSent = 0;
var requestsFailed = 0;
var finalizeContext = function() {
var tot = requestsSent + requestsFailed;
if (tot == awslogsData.logEvents.length) {
if (requestsFailed > 0) {
context.fail(requestsFailed + " / " + tot + " events failed");
} else {
context.succeed(requestsSent + " requests sent");
}
}
};

var re = new RegExp(/(?:RequestId:|Z)\s+([\w\d\-]+)/);
var lastRequestID = null;
awslogsData.logEvents.forEach(function(val, idx, arr) {
var req = https.request(options, function(res) {
var body = '';
console.log('Status:', res.statusCode);
res.setEncoding('utf8');
res.on('data', function(chunk) { body += chunk; });
res.on('end', function() {
console.log('Successfully processed HTTPS response');
requestsSent++;
finalizeContext();
});
});

req.on('error', function(e) {
console.log(e.message)
requestsFailed++;
finalizeContext();
});

var stream=awslogsData.logStream;
var group=awslogsData.logGroup;
var rs = re.exec(val.message);
if (rs!==null) {
lastRequestID = rs[1];
}
val.requestID = lastRequestID;
val.logStream = stream;
val.logGroup = group;
req.end(JSON.stringify(val));
});

});
// Auto detect if message is json
try {
val.message = JSON.parse(val.message);
} catch (err) {
// Do nothing, leave as text
val.message.trim()
}

// delete id as it's not very useful
delete val.id;

val.logStream = awslogsData.logStream;
val.logGroup = awslogsData.logGroup;
val.requestID = lastRequestID;
req.end(JSON.stringify(val));
});

});
};