Commit graph

4608 commits

Author SHA1 Message Date
Jordan Sissel
46e5b75c3f Set release date 2013-09-03 11:55:00 -07:00
Jordan Sissel
10a0a279f8 - version! 2013-09-03 11:54:40 -07:00
Jordan Sissel
2f208c1579 - fix plugin_status -> milestone
- move requires to register
2013-09-03 11:49:23 -07:00
Jordan Sissel
421a795e16 #536 2013-09-03 11:45:05 -07:00
Jordan Sissel
25938f3bc1 Merge branch 'master' of https://github.com/mrjcleaver/logstash into mrjcleaver-master
Conflicts:
	.gitignore
2013-09-03 11:44:21 -07:00
Jordan Sissel
589b3bcca7 #579 2013-09-03 11:42:13 -07:00
Jordan Sissel
7cc6dd5965 Merge pull request #579 from pbarrera/extractnumbers
Adding extractnumbers filter
2013-09-03 11:40:32 -07:00
Jordan Sissel
cb58e2c800 Merge pull request #585 from nilya/patch-1
Add @ to URIPATH and URIPARAM
2013-09-03 11:39:57 -07:00
Jordan Sissel
ae9ac1977f Merge pull request #616 from stuart-warren/patch-2
Create /var/lib/logstash for ubuntu
2013-09-03 11:31:44 -07:00
Jordan Sissel
67cd13fade fix missing <ul> 2013-09-03 11:13:19 -07:00
Jordan Sissel
b29fe925ef Merge pull request #617 from bernd/workaround-slow-openssl-load
Add workaround for slow openssl loading (LOGSTASH-1223)
2013-09-03 09:31:39 -07:00
Jordan Sissel
b454b7af3e - make sure we have gem deps and geoip before running tests (#615) 2013-09-03 09:30:45 -07:00
Jordan Sissel
87a4391924 - regression test to ensure single-quoted values as attribute names is
valid.
2013-09-03 09:08:22 -07:00
Jordan Sissel
d49b308211 - catch another shutdown signal 2013-09-03 09:08:00 -07:00
Jordan Sissel
e4a9f09ba1 Merge pull request #618 from JonathanTron/allow-quoted-string-as-key-in-config
Allow quoted (single/double) string as plugin config keys
2013-09-03 09:02:07 -07:00
Jonathan Tron
72e8b4002c Allow quoted (single/double) string as plugin config keys 2013-09-03 17:57:22 +02:00
Bernd Ahlers
98c55e70ad Add workaround for LOGSTASH-1223.
Loading "openssl" with the flatjar is super slow. For some reason it is
fast with an empty $LOAD_PATH.
2013-09-03 16:31:54 +02:00
stuart-warren
e4573c80c3 Create /var/lib/logstash for ubuntu
Missing /var/lib/logstash for ubuntu
Package will not install properly without it
2013-09-03 12:46:43 +01:00
Jordan Sissel
48ca389837 Merge branch 'master' of github.com:logstash/logstash
Conflicts:
	Makefile
2013-09-02 22:39:25 -07:00
Jordan Sissel
a15a0a5ff2 - split wget/gzip steps 2013-09-02 22:37:54 -07:00
Jordan Sissel
fe503adef9 - only write the geoip database if the fetch was successful 2013-09-02 22:36:51 -07:00
Jordan Sissel
a82f417619 Merge pull request #614 from GregMefford/master
Bugfix: missing policy-id (since it wasn't greedy) and hashcodes in Cisco ASA-4-106023 log format
2013-09-02 22:12:33 -07:00
Greg Mefford
55a3e80fb8 Fixed missing policy-id and hashcodes in Cisco ASA-4-106023 log format 2013-09-02 20:58:47 -04:00
Jordan Sissel
a77a315855 Merge pull request #606 from bodgit/cidr
Simple CIDR filter.
2013-09-02 15:29:51 -07:00
Jordan Sissel
14559bec59 Merge pull request #610 from GregMefford/master
Added a bunch of Grok patterns for Cisco ASA firewall syslog messages.
2013-09-02 15:28:27 -07:00
Jordan Sissel
e9c0e17809 Merge pull request #612 from bodgit/log4j
Remove stray comma in log4j input.

Conflicts:
	lib/logstash/inputs/log4j.rb
2013-09-02 22:22:38 +00:00
Jordan Sissel
dd40c721b4 update changelog through 32a1e9b0e1 2013-09-02 22:02:04 +00:00
Jordan Sissel
32a1e9b0e1 - remove another debug print 2013-09-02 21:16:44 +00:00
Jordan Sissel
c94ea0aee2 Merge branch 'master' of github.com:logstash/logstash
Conflicts:
	lib/logstash/logging.rb
2013-09-02 21:14:41 +00:00
Jordan Sissel
77bfd4abdb - try to improve error reporting even when --log is specified
- remove extra prints
2013-09-02 21:13:25 +00:00
Jordan Sissel
f86b415393 Merge pull request #611 from JonathanTron/allow-curl-for-geoip-fetch
Use wget-or-curl in Makefile to fetch vendor/geoip data file
2013-09-02 14:10:34 -07:00
Jordan Sissel
ee99fca907 Merge pull request #613 from JonathanTron/LOGSTASH-1274
Fix log4j logging when redirecting output to a file (LOGSTASH-1274)
2013-09-02 13:24:32 -07:00
Jordan Sissel
a98ba35f98 - skip tests that use jruby-specific features (with an obvious TODO item
implied that we'll make it work under MRI/RBX eventually)
2013-09-02 20:17:20 +00:00
Jordan Sissel
b8a0bc209f - add negated expression examples 2013-09-02 12:16:28 -07:00
Jordan Sissel
5c23e9214d - stop hacking support for in/regexp stuff; this fixes negating regexps
and other things.
2013-09-02 12:10:50 -07:00
Jonathan Tron
ff5faedf4e Fix log4j logging when redirecting output to a file (LOGSTASH-1274) 2013-09-02 20:44:47 +02:00
Matt Dainty
e32302bc23 Remove stray comma.
It was creating an event with the file field looking like this:

    "file" => [
        [0] "?:?",
        [1] "?"
    ]

Now it looks like:

    "file" => "?:?"
2013-09-02 16:44:09 +01:00
Jonathan Tron
1ebb2006e7 Use wget-or-curl in Makefile to fetch vendor/geoip data file 2013-09-02 13:27:09 +02:00
Greg Mefford
e3f0220fe3 Add a Grok expression for the base part of the Cisco ASA syslog message 2013-09-01 16:26:55 -04:00
Greg Mefford
33f6297924 List all matched message codes in the Grok names to help troublshoot parse failures 2013-09-01 08:24:36 -04:00
Jordan Sissel
516a0b6410 - refactor json_encode filter to use source+target settings
- add specs to cover json_encode
2013-08-31 22:43:24 -07:00
Jordan Sissel
a732b06c20 Merge pull request #583 from divanikus/master
Add slope and metric group for ganglia output.
2013-08-31 22:12:57 -07:00
Jordan Sissel
9b29c3e513 - update old references to event.tags, event.unix_timestamp, and
event.ruby_timestamp
2013-08-31 21:50:13 -07:00
Jordan Sissel
b4dad51c6c - fix references to event.message (now is event["message"]) 2013-08-31 21:46:16 -07:00
Jordan Sissel
6a1b17f341 - use milestones
- use event[...] now
2013-08-31 21:28:46 -07:00
Jordan Sissel
27dfd37a53 fix ordering 2013-08-31 21:28:43 -07:00
Jordan Sissel
f44601370a Update links for configuration details 2013-08-31 21:25:21 -07:00
Jordan Sissel
f15e42f946 Update to reflect 1.2 2013-08-31 21:24:14 -07:00
Greg Mefford
be6754fc66 Added a bunch of Grok patterns for Cisco ASA firewall syslog messages.
* Confirmed to work:
  ASA-6-106015
  ASA-1-106021
  ASA-4-106023
  ASA-5-106100
  ASA-6-110002
  ASA-6-302010
  ASA-6-302013
  ASA-6-302014
  ASA-6-302015
  ASA-6-302016
  ASA-6-302020
  ASA-6-302021
  ASA-3-313001
  ASA-3-313004
  ASA-4-313005
  ASA-3-313008
  ASA-4-402117
  ASA-4-402119
  ASA-4-419002
  ASA-6-602303
  ASA-6-602304
  ASA-6-713172
  ASA-4-733100
* Based on patterns found here(https://gist.github.com/dav3860/5345656) and documentation here(http://www.cisco.com/en/US/docs/security/asa/syslog-guide/logmsgs.html#wp4771036)
  ASA-2-106001
  ASA-2-106006
  ASA-2-106007
  ASA-2-106010
  ASA-3-106014
  ASA-4-419001
  ASA-4-500004
  ASA-6-305011
  ASA-7-710001
  ASA-7-710002
  ASA-7-710003
  ASA-7-710005
  ASA-7-710006
2013-08-31 23:54:45 -04:00
Jordan Sissel
eabfbbf859 Fix syntax 2013-08-31 11:54:12 -07:00