Commit graph

319 commits

Author SHA1 Message Date
Jordan Sissel
ee28786400 - add a tag for events that have multiple lines (keeps backwards compat
to the older multiline filter)
- add tests to cover this behavior.
2013-08-30 18:00:11 -07:00
Jordan Sissel
9518347f62 - add tests for drop filter
- promote drop filter to milestone 3
2013-08-28 07:12:16 -07:00
Jordan Sissel
bddcc6ccf1 - add more conditional tests (logical operators, unary negate, etc) 2013-08-28 06:41:26 +00:00
Jordan Sissel
582aca3436 - Add /regexp/ support to the config grammar
- Add tests for all the conditional comparison operators
2013-08-27 00:03:45 +00:00
Jordan Sissel
f6eb5a8f18 - json codec encodes and includes a trailing newline now; fix the test. 2013-08-25 01:04:27 -07:00
Brad Fritz
0630d51ac1 [syslog5424] do not capture chevrons with priority value
Priority is "191", not "<191>".  The syslog_pri filter expects a
raw integer without the extra punctuation.
2013-08-24 11:35:51 -04:00
Jordan Sissel
0f946192db Merge pull request #586 from bfritz/syslog5424-fixes
nil instead of "-" for missing structured data with grok pattern for rfc 5424 syslog
2013-08-23 15:36:15 -07:00
Brad Fritz
93990829f2 [syslog5424] structured data should be nil when RFC NILVALUE is used 2013-08-23 14:34:41 -04:00
Brad Fritz
0985f02eb7 [syslog5424] confirm process ID is nil when RFC NILVALUE used 2013-08-23 14:34:34 -04:00
Jordan Sissel
0ec869bca0 - fix redis tests 2013-08-20 22:59:04 -07:00
Jordan Sissel
a4aa87e691 Fix input and agent harnesses 2013-08-20 22:58:46 -07:00
Jordan Sissel
51af4e6622 Skip speed tests by default 2013-08-20 18:58:41 -07:00
Jordan Sissel
644a027178 - skip if not running in a jar 2013-08-20 18:58:29 -07:00
Jordan Sissel
e0b9ce408b - Add tests to cover the 'in' conditional operator. Anything that
responds to .include? should be valid. The following are roughly
synonymous:
  logstash config:  whatever in fancypants
  ruby: fancypants.include?(whatever)

  This operator is false if the object does not respond to the
  'include?' method.
2013-08-17 07:07:56 +00:00
Jordan Sissel
82ca42f3dd Merge pull request #559 from bobtfish/event_sprintf_fixnums
Small fix for logstash/event.rb's sprintf method.
2013-08-16 15:22:18 -07:00
Jordan Sissel
321ec3b9ec Merge pull request #569 from hltbra/master
Add "emergency" to `LOGLEVEL` grok pattern
2013-08-16 15:19:57 -07:00
Jordan Sissel
c219f460e9 Based on polling some users, "else if" is more obvious than "elsif" 2013-08-15 13:21:59 -07:00
Jordan Sissel
dd13128be5 - add require 2013-08-13 22:07:39 -07:00
Jordan Sissel
cd20021156 Remove prints from tests 2013-08-13 21:57:05 -07:00
Jordan Sissel
1a7a7c8db4 - update to reflect new defaults (no tags by default and grok has
'singles' enabled by default)
2013-08-13 20:53:23 -07:00
Jordan Sissel
40217a8e7f Revert "Revert "- use more let() statements instead of local scoping things""
This reverts commit 87c46c3345.
2013-08-13 20:53:22 -07:00
Jordan Sissel
87c46c3345 Revert "- use more let() statements instead of local scoping things"
This reverts commit 780cb9bfce.
2013-08-09 19:34:28 -07:00
Jordan Sissel
780cb9bfce - use more let() statements instead of local scoping things
This is an attempt to fix two specs that clobber eachother, but it
  did not fix anything.
  Still, this is easier to read now.
2013-08-09 16:46:09 -07:00
Jordan Sissel
cd102cd39d - Rename HashEval -> FieldReference (LOGSTASH-1250) 2013-08-09 09:08:10 -07:00
Jordan Sissel
e63db45b94 - add grok perf test 2013-08-08 23:24:02 -07:00
Jordan Sissel
ad3839f4c1 Add another case for block testing 2013-08-08 23:23:54 -07:00
Jordan Sissel
1c4e2b84f4 - do perf tests twice to avoid warm-up/compilation costs 2013-08-08 23:01:14 -07:00
Jordan Sissel
d0191b2665 Add event perf test 2013-08-08 23:01:14 -07:00
Jordan Sissel
ab5f56c855 Add a hash evaluation compiler
Syntax supported: somekey, [somekey], [some][nested][thing]
2013-08-06 17:45:22 -07:00
Hugo Lopes Tavares
1e8f5d8b10 Add "emergency" to LOGLEVEL grok pattern
Apache, nginx, syslog, and many systems use emergency level,
and it was missing in logstash.

Also add tests to cover all scenarios of `LOGLEVEL` expansion.
2013-08-02 11:24:12 -04:00
Tomas Doran
2830015267 Small fix for logstash/event.rb's sprintf method.
I found this with the riemann output - if you set it up with:
riemann_event => [ 'metric', 0 ]

Then the value gets sprintf'd, which utterly fails in this unquoted case, as 0
is a Fixnum, which doesn't have an index method.

This, we explicitly call .to_s in the sprintf method, to ensure that the
format is a string before call .index on it
2013-07-25 19:51:25 -07:00
Jordan Sissel
af538da782 - log the compiled code more readably
- clarify rbx issues indicating that I haven't really done any debugging
to figure out where the problem is.
- update changelog with todos
- remove unused require
- try to fix up require() debugger
2013-07-22 13:48:15 -07:00
Jordan Sissel
b2444a1bcb Disable multiline codec 2013-07-18 12:24:18 -07:00
Jordan Sissel
c986fa41af - add fail2ban log sample test 2013-07-03 22:48:25 -07:00
Jordan Sissel
85be32b5ca - use real tcp sockets 2013-07-03 22:48:25 -07:00
Jordan Sissel
71547029a6 - fix tests due to change in DATE_EU pattern 2013-07-03 22:48:25 -07:00
Jordan Sissel
044d330376 Merge pull request #518 from thiyagu-p/master
Handling multiline rails logs generated in passenger deployment
2013-06-27 10:23:25 -07:00
Jordan Sissel
a9b19c484d - fix tcp input tests 2013-06-26 18:13:26 -07:00
Jordan Sissel
8e52bcd046 - fix generator input 2013-06-25 22:59:45 -07:00
Jordan Sissel
1a38a7c522 - fix file input (and improve the way inputs can be tested) 2013-06-25 22:52:23 -07:00
Jordan Sissel
730f026c20 Merge pull request #528 from alistar79/master
Addition: statsd output plugin gauge metric type

Conflicts:
	lib/logstash/outputs/statsd.rb
2013-06-24 08:54:28 -07:00
Jordan Sissel
5189489901 Merge pull request #469 from wesmaldonado/spec_for_parse_haproxy_log_example
Added spec for HAPROXYHTTP pattern.
2013-06-23 23:22:44 -07:00
Jordan Sissel
684c070249 - remove 'type' references and fix up style
- use new time object comparison
2013-06-19 10:12:01 -07:00
Jordan Sissel
c55b493c32 Remove references to event v0 fields (@message) 2013-06-19 10:11:41 -07:00
Jordan Sissel
6dc538e23f - fix syslog example spec 2013-06-19 10:07:15 -07:00
Jordan Sissel
e48f05e607 Remove '@' from '@message' 2013-06-19 10:03:38 -07:00
Jordan Sissel
9f1127beca Skip msgpack codec tests because Hash#to_msgpack isn't a valid method, I guess? 2013-06-19 10:03:10 -07:00
Jordan Sissel
2b2f8554bf - don't need to specify the 'database' anymore, woot. 2013-06-18 22:25:03 -07:00
Jordan Sissel
15438097cc Fix broken tests 2013-06-18 22:24:53 -07:00
Jordan Sissel
9466ad881a YAML no longer supported 2013-06-18 22:24:40 -07:00