-
Notifications
You must be signed in to change notification settings - Fork 3.5k
/
decorators.rb
70 lines (60 loc) · 2.68 KB
/
decorators.rb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# Licensed to Elasticsearch B.V. under one or more contributor
# license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright
# ownership. Elasticsearch B.V. licenses this file to you under
# the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
require "logstash/util"
module LogStash::Util
# Decorators provides common manipulation on the event data.
module Decorators
include LogStash::Util::Loggable
extend self
# fields is a hash of field => value
# where both `field` and `value` can use sprintf syntax.
def add_fields(fields,event, pluginname)
fields.each do |field, value|
field = event.sprintf(field)
value = Array(value)
value.each do |v|
v = event.sprintf(v)
if event.include?(field)
# note below that the array field needs to be updated then reassigned to the event.
# this is important because a construct like event[field] << v will not work
# in the current Java event implementation. see https://github.com/elastic/logstash/issues/4140
a = Array(event.get(field))
a << v
event.set(field, a)
else
event.set(field, v)
end
self.logger.debug? and self.logger.debug("#{pluginname}: adding value to field", "field" => field, "value" => value)
end
end
end
# tags is an array of string. sprintf syntax can be used.
def add_tags(new_tags, event, pluginname)
return if new_tags.empty?
tags = Array(event.get("tags")) # note that Array(nil) => []
new_tags.each do |new_tag|
new_tag = event.sprintf(new_tag)
self.logger.debug? and self.logger.debug("#{pluginname}: adding tag", "tag" => new_tag)
# note below that the tags array field needs to be updated then reassigned to the event.
# this is important because a construct like event["tags"] << tag will not work
# in the current Java event implementation. see https://github.com/elastic/logstash/issues/4140
tags << new_tag #unless tags.include?(new_tag)
end
event.set("tags", tags)
end
end # module LogStash::Util::Decorators
end # module LogStash::Util