config.go

package template

import (
	"github.com/elastic/beats/libbeat/common"
	"github.com/elastic/beats/libbeat/common/bus"
	"github.com/elastic/beats/libbeat/logp"
	"github.com/elastic/beats/libbeat/processors"

	ucfg "github.com/elastic/go-ucfg"
)

// Mapper maps config templates with conditions, if a match happens on a discover event
// the given template will be used as config
type Mapper []*ConditionMap

// ConditionMap maps a condition to the configs to use when it's triggered
type ConditionMap struct {
	Condition *processors.Condition
	Configs   []*common.Config
}

// MapperSettings holds user settings to build Mapper
type MapperSettings []*struct {
	ConditionConfig *processors.ConditionConfig `config:"condition"`
	Configs         []*common.Config            `config:"config"`
}

// NewConfigMapper builds a template Mapper from given settings
func NewConfigMapper(configs MapperSettings) (*Mapper, error) {
	var mapper Mapper
	for _, c := range configs {
		condition, err := processors.NewCondition(c.ConditionConfig)
		if err != nil {
			return nil, err
		}
		mapper = append(mapper, &ConditionMap{
			Condition: condition,
			Configs:   c.Configs,
		})
	}

	return &mapper, nil
}

// Event adapts MapStr to processors.ValuesMap interface
type Event common.MapStr

// GetValue extracts given key from an Event
func (e Event) GetValue(key string) (interface{}, error) {
	val, err := common.MapStr(e).GetValue(key)
	if err != nil {
		return nil, err
	}
	return val, nil
}

// GetConfig returns a matching Config if any, nil otherwise
func (c *Mapper) GetConfig(event bus.Event) []*common.Config {
	var result []*common.Config

	for _, mapping := range *c {
		if mapping.Configs != nil && !mapping.Condition.Check(Event(event)) {
			continue
		}

		// unpack input
		vars, err := ucfg.NewFrom(map[string]interface{}{
			"data": event,
		})
		if err != nil {
			logp.Err("Error building config: %v", err)
		}
		opts := []ucfg.Option{
			ucfg.PathSep("."),
			ucfg.Env(vars),
			ucfg.ResolveEnv,
			ucfg.VarExp,
		}
		for _, config := range mapping.Configs {
			c, err := ucfg.NewFrom(config, opts...)
			if err != nil {
				logp.Err("Error parsing config: %v", err)
				continue
			}
			// Unpack config to process any vars in the template:
			var unpacked map[string]interface{}
			c.Unpack(&unpacked, opts...)
			if err != nil {
				logp.Err("Error unpacking config: %v", err)
				continue
			}
			// Repack again:
			res, err := common.NewConfigFrom(unpacked)
			if err != nil {
				logp.Err("Error creating config from unpack: %v", err)
				continue
			}
			result = append(result, res)
		}
	}
	return result
}