github-mirrors/logstash
1
0
Fork 0
mirror of https://github.com/elastic/logstash.git synced 2025-04-24 14:47:19 -04:00
Code Issues Projects Releases Packages Wiki Activity

- fix up style

Browse source
This commit is contained in:
Jordan Sissel 2010-11-20 07:58:07 +00:00
parent 928e72a690
commit 9dd7958fbc
1 changed files with 22 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

29
lib/logstash/filters/multiline.rb
View file

@ -61,13 +61,19 @@ class LogStash::Filters::Multiline < LogStash::Filters::Base
@types[type] = typeconfig
if !typeconfig.include?("pattern")
@logger.fatal("'multiline' filter config for type #{type} is missing 'pattern' setting", typeconfig)
@logger.fatal(["'multiline' filter config for type #{type} is missing"
" 'pattern' setting", typeconfig])
end
if !typeconfig.include?("what")
@logger.fatal("'multiline' filter config for type #{type} is missing 'what' setting", typeconfig)
@logger.fatal(["'multiline' filter config for type #{type} is missing"
" 'what' setting", typeconfig])
end
if !["next", "previous"].include?(typeconfig["what"])
@logger.fatal("'multiline' filter config for type #{type} has invalid 'what' value. Must be 'next' or 'previous'", typeconfig)
@logger.fatal(["'multiline' filter config for type #{type} has invalid"
" 'what' value. Must be 'next' or 'previous'",
typeconfig])
end
begin
@ -83,17 +89,27 @@ class LogStash::Filters::Multiline < LogStash::Filters::Base
return unless @types.member?(event.type)
@types[event.type].each do |typeconfig|
match = typeconfig["pattern"].match(event.message)
pending = @pending[event.source]
key = [event.source, event.type]
pending = @pending[key]
case typeconfig["what"]
when "prev"
if match
# previous previous line is part of this event.
# append it to the event and cancel it
pending.append(event)
event.cancel
else
# this line is not part of the previous event
# if we have a pending event, it's done, send it.
# put the current event into pending
if pending
tmp = event.to_hash
event.overwrite(pending)
@pending[key] = Event.new(tmp)
else
@pending[event.source]
end
end
when "next"
if match
@ -104,10 +120,9 @@ class LogStash::Filters::Multiline < LogStash::Filters::Base
# and send it. otherwise, this is a new message and not part of
# multiline, send it.
end
else
@logger.warn(["Unknown multiline 'what' value.", typeconfig])
end
end # @types[event.type].each
end # def filter
end # class LogStash::Filters::Date