Commit graph

10918 commits

Author SHA1 Message Date
Jordan Sissel
0befaa3037 - urlescape our strings so they're safer (and easier to paste places) 2010-11-13 12:04:58 +00:00
Jordan Sissel
c986701c2c - Store web2.0 state in the url bar. 2010-11-13 11:59:49 +00:00
Jordan Sissel
a56a9325e2 - remove superfluous line 2010-11-13 11:26:21 +00:00
Jordan Sissel
e91677e724 - Fix sneaky bug where we would accidentally connect our amqp to localhost
rather than the one we specified.
2010-11-13 11:24:56 +00:00
Jordan Sissel
280b8f1bfe - fix logging 2010-11-13 11:16:53 +00:00
Jordan Sissel
8bc2a55a27 - use Enumerable#detect instead of Enumerable.select{}[0]
- don't use self.send
2010-11-13 00:01:55 +00:00
Jordan Sissel
e5b829fe05 - Don't use self.send
- Add helpful comments
2010-11-12 23:13:08 +00:00
Jordan Sissel
d9152a44b1 - use pre-wrap whitespace style 2010-11-12 08:47:50 +00:00
Jordan Sissel
75bc94abdf - Obey whitespace in logs. 2010-11-12 04:31:07 +00:00
Jordan Sissel
d8e5bfaca5 - In case we are using globs, replace the path in the file url with whatever
EM::FileTail says it is.
2010-11-12 04:06:56 +00:00
Jordan Sissel
f85e708d0f remove unused 2010-11-12 04:05:46 +00:00
Jordan Sissel
513df922c5 - For sanity in chaining, we should not override an event.type if we already
have one (for example, if we get an event over amqp, we should not override the
  type).
2010-11-12 03:47:52 +00:00
Jordan Sissel
16ad0f80f7 - log grokpile stuff 2010-11-11 09:03:01 +00:00
Jordan Sissel
1213d77d94 forgot to check this in (fixes queue naming) 2010-11-11 09:02:35 +00:00
Jordan Sissel
75910bb656 - unify input/output for amqp. This fixes a bug where we amqp:///topic/foo
would register a topic as "/topic/foo" for outputs but "foo" for inputs.
2010-11-11 08:20:13 +00:00
Jordan Sissel
7f4b1192f8 - Add output amqp logging 2010-11-11 08:15:28 +00:00
Jordan Sissel
253df23b57 - Add input logging 2010-11-11 08:13:04 +00:00
Jordan Sissel
3c9c38e55e - add proper setters 2010-11-11 08:06:03 +00:00
Jordan Sissel
fa9686832c - update gemspec 2010-11-11 07:39:22 +00:00
Jordan Sissel
add9eb66cd remove ap 2010-11-11 07:38:10 +00:00
Jordan Sissel
dd93817f07 - remove 'ap' 2010-11-11 07:37:58 +00:00
Jordan Sissel
f440e22664 2010-11-11 07:37:48 +00:00
Jordan Sissel
1a2ca3fc28 - Add some nagios patterns 2010-11-11 07:37:07 +00:00
Jordan Sissel
7f38743da4 - Add grokdiscovery example 2010-11-09 10:22:40 +00:00
Jordan Sissel
65a115fee6 - Add support for iso8601 timestamps in syslog messages 2010-11-09 10:22:25 +00:00
Jordan Sissel
955773f4ff - make grokdiscovery work 2010-11-09 10:19:38 +00:00
Jordan Sissel
ca568c0437 - Add grokdiscovery 2010-11-09 10:11:28 +00:00
Jordan Sissel
37488a44fc - use DateTime.parse to ensure any ISO8601 format dates rae in our common
format. This may not be necessary in the long run.
2010-11-09 09:58:28 +00:00
Jordan Sissel
5a8a350ef3 - Degrade-without-dying if we don't have awesome_print 2010-11-09 09:50:29 +00:00
Jordan Sissel
a579aea186 - Allow easy specification of ISO8601 format 2010-11-09 09:49:55 +00:00
Jordan Sissel
2953457843 - Add all patterns found 2010-11-09 09:27:57 +00:00
Pete Fritchman
ec2ae60d83 add support for streaming logs to elasticsearch via a "rabbitmq river".
we have to PUT a json config to the elasticsearch HTTP API to tell it
where to look, then we use our amqp output to send bulk-data style
index messages to elasticsearch. The ES side does bulk-queueing for us.
2010-11-01 01:46:20 +00:00
Pete Fritchman
b250a0218c move CGI include around to proper place 2010-11-01 01:40:29 +00:00
Pete Fritchman
84ef233bca - parse query string on output URLs for additional options
- amqp now properly supports "queue" type (and in general, works now)
- amqp supports durable queues (?durable=1)
- added amqp#receive_raw for publishing a string directly
2010-11-01 01:35:52 +00:00
Pete Fritchman
3014715d78 automatically include the right lib dir 2010-11-01 01:31:15 +00:00
Jordan Sissel
57f480adeb - Make TZ in DATESTAMP_OTHER optional
- Add more debugging to filters/grok to make it easier to see pattern compile problems.
- Add percentage progress to rate.sh (for tracking long imports on logstash)
- Add content-type to the webserver
- Update to web interface to use new @-prefixed notation (@message, etc)
2010-10-31 08:59:28 +00:00
Jordan Sissel
b3e67888a1 2010-10-31 08:52:41 +00:00
Jordan Sissel
8ef912a624 - Only push events to websockets when we have subscribers 2010-10-31 08:28:55 +00:00
Jordan Sissel
97d71ed130 - Add script to hackily check for progress on a long import. 2010-10-31 08:17:47 +00:00
Pete Fritchman
8462bd05fa introduce log types, in addition to tags 2010-10-31 06:01:46 +00:00
Pete Fritchman
7e80e89c39 show usage when we encouner option-related problems 2010-10-31 04:54:25 +00:00
Pete Fritchman
8d6419e191 s/throw/raise/ 2010-10-31 04:50:19 +00:00
Pete Fritchman
f7ad0a0a9a create base classes for inputs/outputs/filters 2010-10-31 04:46:12 +00:00
Jordan Sissel
2aba74e2f4 - metadata uses '@' prefix notation. (@timestamp, @source, etc) 2010-10-31 02:22:12 +00:00
Jordan Sissel
0de9b9d9c3 - redirect / => /search
- clean up sass deprecated warnings
- add note about clicking on results
2010-10-29 16:18:49 +00:00
Jordan Sissel
4b9d940341 - Escpae results 2010-10-29 16:17:28 +00:00
Jordan Sissel
73714d66d6 - Add javascript I forgot earlier. 2010-10-28 19:48:24 +00:00
Jordan Sissel
d2f8cadc50 - add Logger support 2010-10-28 19:05:14 +00:00
Jordan Sissel
2ac9f69c55 - Update to work with latest code 2010-10-28 11:00:27 +00:00
Jordan Sissel
2053ceabcb - revert :port addition 2010-10-28 10:59:08 +00:00