github-mirrors/logstash
1
0
Fork 0
mirror of https://github.com/elastic/logstash.git synced 2025-04-24 06:37:19 -04:00
Code Issues Projects Releases Packages Wiki Activity

LOGSTASH-90: only process events that match our @type. also don't tag _grokparsefailure if we don't have any patterns.

Browse source
This commit is contained in:
Pete Fritchman 2011-05-20 23:54:17 -07:00
parent 9c36df44ec
commit 11b95e57db
1 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
lib/logstash/filters/grok.rb
View file

@ -109,6 +109,16 @@ class LogStash::Filters::Grok < LogStash::Filters::Base
# parse it with grok
match = false
# Only filter events we are configured for
if event.type != @type
return
end
if @@grokpiles[event.type].length == 0
@logger.debug("Skipping grok for event type=#{event.type} (no grokpiles defined)")
return
end
if !event.message.is_a?(Array)
messages = [event.message]
else
@ -119,7 +129,7 @@ class LogStash::Filters::Grok < LogStash::Filters::Base
@logger.debug(["Running grok filter", event])
@@grokpiles[event.type].each do |pile|
@logger.debug(["Trying pattern", pile])
@logger.debug(["Trying pattern for type #{event.type}", pile])
grok, match = @pile.match(message)
@logger.debug(["Result", { :grok => grok, :match => match }])
break if match