Jordan Sissel
|
46e5b75c3f
|
Set release date
|
2013-09-03 11:55:00 -07:00 |
|
Jordan Sissel
|
10a0a279f8
|
- version!
|
2013-09-03 11:54:40 -07:00 |
|
Jordan Sissel
|
2f208c1579
|
- fix plugin_status -> milestone
- move requires to register
|
2013-09-03 11:49:23 -07:00 |
|
Jordan Sissel
|
421a795e16
|
#536
|
2013-09-03 11:45:05 -07:00 |
|
Jordan Sissel
|
25938f3bc1
|
Merge branch 'master' of https://github.com/mrjcleaver/logstash into mrjcleaver-master
Conflicts:
.gitignore
|
2013-09-03 11:44:21 -07:00 |
|
Jordan Sissel
|
589b3bcca7
|
#579
|
2013-09-03 11:42:13 -07:00 |
|
Jordan Sissel
|
7cc6dd5965
|
Merge pull request #579 from pbarrera/extractnumbers
Adding extractnumbers filter
|
2013-09-03 11:40:32 -07:00 |
|
Jordan Sissel
|
cb58e2c800
|
Merge pull request #585 from nilya/patch-1
Add @ to URIPATH and URIPARAM
|
2013-09-03 11:39:57 -07:00 |
|
Jordan Sissel
|
ae9ac1977f
|
Merge pull request #616 from stuart-warren/patch-2
Create /var/lib/logstash for ubuntu
|
2013-09-03 11:31:44 -07:00 |
|
Jordan Sissel
|
67cd13fade
|
fix missing <ul>
|
2013-09-03 11:13:19 -07:00 |
|
Jordan Sissel
|
b29fe925ef
|
Merge pull request #617 from bernd/workaround-slow-openssl-load
Add workaround for slow openssl loading (LOGSTASH-1223)
|
2013-09-03 09:31:39 -07:00 |
|
Jordan Sissel
|
b454b7af3e
|
- make sure we have gem deps and geoip before running tests (#615)
|
2013-09-03 09:30:45 -07:00 |
|
Jordan Sissel
|
87a4391924
|
- regression test to ensure single-quoted values as attribute names is
valid.
|
2013-09-03 09:08:22 -07:00 |
|
Jordan Sissel
|
d49b308211
|
- catch another shutdown signal
|
2013-09-03 09:08:00 -07:00 |
|
Jordan Sissel
|
e4a9f09ba1
|
Merge pull request #618 from JonathanTron/allow-quoted-string-as-key-in-config
Allow quoted (single/double) string as plugin config keys
|
2013-09-03 09:02:07 -07:00 |
|
Jonathan Tron
|
72e8b4002c
|
Allow quoted (single/double) string as plugin config keys
|
2013-09-03 17:57:22 +02:00 |
|
Bernd Ahlers
|
98c55e70ad
|
Add workaround for LOGSTASH-1223.
Loading "openssl" with the flatjar is super slow. For some reason it is
fast with an empty $LOAD_PATH.
|
2013-09-03 16:31:54 +02:00 |
|
stuart-warren
|
e4573c80c3
|
Create /var/lib/logstash for ubuntu
Missing /var/lib/logstash for ubuntu
Package will not install properly without it
|
2013-09-03 12:46:43 +01:00 |
|
Jordan Sissel
|
48ca389837
|
Merge branch 'master' of github.com:logstash/logstash
Conflicts:
Makefile
|
2013-09-02 22:39:25 -07:00 |
|
Jordan Sissel
|
a15a0a5ff2
|
- split wget/gzip steps
|
2013-09-02 22:37:54 -07:00 |
|
Jordan Sissel
|
fe503adef9
|
- only write the geoip database if the fetch was successful
|
2013-09-02 22:36:51 -07:00 |
|
Jordan Sissel
|
a82f417619
|
Merge pull request #614 from GregMefford/master
Bugfix: missing policy-id (since it wasn't greedy) and hashcodes in Cisco ASA-4-106023 log format
|
2013-09-02 22:12:33 -07:00 |
|
Greg Mefford
|
55a3e80fb8
|
Fixed missing policy-id and hashcodes in Cisco ASA-4-106023 log format
|
2013-09-02 20:58:47 -04:00 |
|
Jordan Sissel
|
a77a315855
|
Merge pull request #606 from bodgit/cidr
Simple CIDR filter.
|
2013-09-02 15:29:51 -07:00 |
|
Jordan Sissel
|
14559bec59
|
Merge pull request #610 from GregMefford/master
Added a bunch of Grok patterns for Cisco ASA firewall syslog messages.
|
2013-09-02 15:28:27 -07:00 |
|
Jordan Sissel
|
e9c0e17809
|
Merge pull request #612 from bodgit/log4j
Remove stray comma in log4j input.
Conflicts:
lib/logstash/inputs/log4j.rb
|
2013-09-02 22:22:38 +00:00 |
|
Jordan Sissel
|
dd40c721b4
|
update changelog through 32a1e9b0e1
|
2013-09-02 22:02:04 +00:00 |
|
Jordan Sissel
|
32a1e9b0e1
|
- remove another debug print
|
2013-09-02 21:16:44 +00:00 |
|
Jordan Sissel
|
c94ea0aee2
|
Merge branch 'master' of github.com:logstash/logstash
Conflicts:
lib/logstash/logging.rb
|
2013-09-02 21:14:41 +00:00 |
|
Jordan Sissel
|
77bfd4abdb
|
- try to improve error reporting even when --log is specified
- remove extra prints
|
2013-09-02 21:13:25 +00:00 |
|
Jordan Sissel
|
f86b415393
|
Merge pull request #611 from JonathanTron/allow-curl-for-geoip-fetch
Use wget-or-curl in Makefile to fetch vendor/geoip data file
|
2013-09-02 14:10:34 -07:00 |
|
Jordan Sissel
|
ee99fca907
|
Merge pull request #613 from JonathanTron/LOGSTASH-1274
Fix log4j logging when redirecting output to a file (LOGSTASH-1274)
|
2013-09-02 13:24:32 -07:00 |
|
Jordan Sissel
|
a98ba35f98
|
- skip tests that use jruby-specific features (with an obvious TODO item
implied that we'll make it work under MRI/RBX eventually)
|
2013-09-02 20:17:20 +00:00 |
|
Jordan Sissel
|
b8a0bc209f
|
- add negated expression examples
|
2013-09-02 12:16:28 -07:00 |
|
Jordan Sissel
|
5c23e9214d
|
- stop hacking support for in/regexp stuff; this fixes negating regexps
and other things.
|
2013-09-02 12:10:50 -07:00 |
|
Jonathan Tron
|
ff5faedf4e
|
Fix log4j logging when redirecting output to a file (LOGSTASH-1274)
|
2013-09-02 20:44:47 +02:00 |
|
Matt Dainty
|
e32302bc23
|
Remove stray comma.
It was creating an event with the file field looking like this:
"file" => [
[0] "?:?",
[1] "?"
]
Now it looks like:
"file" => "?:?"
|
2013-09-02 16:44:09 +01:00 |
|
Jonathan Tron
|
1ebb2006e7
|
Use wget-or-curl in Makefile to fetch vendor/geoip data file
|
2013-09-02 13:27:09 +02:00 |
|
Greg Mefford
|
e3f0220fe3
|
Add a Grok expression for the base part of the Cisco ASA syslog message
|
2013-09-01 16:26:55 -04:00 |
|
Greg Mefford
|
33f6297924
|
List all matched message codes in the Grok names to help troublshoot parse failures
|
2013-09-01 08:24:36 -04:00 |
|
Jordan Sissel
|
516a0b6410
|
- refactor json_encode filter to use source+target settings
- add specs to cover json_encode
|
2013-08-31 22:43:24 -07:00 |
|
Jordan Sissel
|
a732b06c20
|
Merge pull request #583 from divanikus/master
Add slope and metric group for ganglia output.
|
2013-08-31 22:12:57 -07:00 |
|
Jordan Sissel
|
9b29c3e513
|
- update old references to event.tags, event.unix_timestamp, and
event.ruby_timestamp
|
2013-08-31 21:50:13 -07:00 |
|
Jordan Sissel
|
b4dad51c6c
|
- fix references to event.message (now is event["message"])
|
2013-08-31 21:46:16 -07:00 |
|
Jordan Sissel
|
6a1b17f341
|
- use milestones
- use event[...] now
|
2013-08-31 21:28:46 -07:00 |
|
Jordan Sissel
|
27dfd37a53
|
fix ordering
|
2013-08-31 21:28:43 -07:00 |
|
Jordan Sissel
|
f44601370a
|
Update links for configuration details
|
2013-08-31 21:25:21 -07:00 |
|
Jordan Sissel
|
f15e42f946
|
Update to reflect 1.2
|
2013-08-31 21:24:14 -07:00 |
|
Greg Mefford
|
be6754fc66
|
Added a bunch of Grok patterns for Cisco ASA firewall syslog messages.
* Confirmed to work:
ASA-6-106015
ASA-1-106021
ASA-4-106023
ASA-5-106100
ASA-6-110002
ASA-6-302010
ASA-6-302013
ASA-6-302014
ASA-6-302015
ASA-6-302016
ASA-6-302020
ASA-6-302021
ASA-3-313001
ASA-3-313004
ASA-4-313005
ASA-3-313008
ASA-4-402117
ASA-4-402119
ASA-4-419002
ASA-6-602303
ASA-6-602304
ASA-6-713172
ASA-4-733100
* Based on patterns found here(https://gist.github.com/dav3860/5345656) and documentation here(http://www.cisco.com/en/US/docs/security/asa/syslog-guide/logmsgs.html#wp4771036)
ASA-2-106001
ASA-2-106006
ASA-2-106007
ASA-2-106010
ASA-3-106014
ASA-4-419001
ASA-4-500004
ASA-6-305011
ASA-7-710001
ASA-7-710002
ASA-7-710003
ASA-7-710005
ASA-7-710006
|
2013-08-31 23:54:45 -04:00 |
|
Jordan Sissel
|
eabfbbf859
|
Fix syntax
|
2013-08-31 11:54:12 -07:00 |
|