/
gelfbeat.go
84 lines (67 loc) · 1.46 KB
/
gelfbeat.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
// Copyright 2019-2022 F5 Inc.
// See LICENSE.txt for the Apache-2 License.
package beater
import (
"encoding/json"
"fmt"
"time"
"github.com/elastic/beats/libbeat/beat"
"github.com/elastic/beats/libbeat/common"
"github.com/elastic/beats/libbeat/logp"
"github.com/threatstack/gelfbeat/config"
)
// Gelfbeat configuration.
type Gelfbeat struct {
done chan struct{}
config config.Config
client beat.Client
}
// New creates an instance of gelfbeat.
func New(b *beat.Beat, cfg *common.Config) (beat.Beater, error) {
c := config.DefaultConfig
if err := cfg.Unpack(&c); err != nil {
return nil, fmt.Errorf("Error reading config file: %v", err)
}
bt := &Gelfbeat{
done: make(chan struct{}),
config: c,
}
return bt, nil
}
// Run starts gelfbeat.
func (bt *Gelfbeat) Run(b *beat.Beat) error {
logp.Info("gelfbeat is running! Hit CTRL-C to stop it.")
var err error
bt.client, err = b.Publisher.Connect()
if err != nil {
return err
}
var packet = make(chan string)
go listen(packet, bt.config)
for {
var jsonMessage string
select {
case <-bt.done:
return nil
case jsonMessage = <-packet:
}
if err != nil {
return err
}
var m GELFDecodedMessage
err = json.Unmarshal([]byte(jsonMessage), &m)
if err != nil {
return err
}
event := beat.Event{
Timestamp: time.Now(),
Fields: common.MapStr(m),
}
bt.client.Publish(event)
}
}
// Stop stops gelfbeat.
func (bt *Gelfbeat) Stop() {
bt.client.Close()
close(bt.done)
}