Jordan Sissel
0befaa3037
- urlescape our strings so they're safer (and easier to paste places)
2010-11-13 12:04:58 +00:00
Jordan Sissel
c986701c2c
- Store web2.0 state in the url bar.
2010-11-13 11:59:49 +00:00
Jordan Sissel
a56a9325e2
- remove superfluous line
2010-11-13 11:26:21 +00:00
Jordan Sissel
e91677e724
- Fix sneaky bug where we would accidentally connect our amqp to localhost
...
rather than the one we specified.
2010-11-13 11:24:56 +00:00
Jordan Sissel
280b8f1bfe
- fix logging
2010-11-13 11:16:53 +00:00
Jordan Sissel
8bc2a55a27
- use Enumerable#detect instead of Enumerable.select{}[0]
...
- don't use self.send
2010-11-13 00:01:55 +00:00
Jordan Sissel
e5b829fe05
- Don't use self.send
...
- Add helpful comments
2010-11-12 23:13:08 +00:00
Jordan Sissel
d9152a44b1
- use pre-wrap whitespace style
2010-11-12 08:47:50 +00:00
Jordan Sissel
75bc94abdf
- Obey whitespace in logs.
2010-11-12 04:31:07 +00:00
Jordan Sissel
d8e5bfaca5
- In case we are using globs, replace the path in the file url with whatever
...
EM::FileTail says it is.
2010-11-12 04:06:56 +00:00
Jordan Sissel
f85e708d0f
remove unused
2010-11-12 04:05:46 +00:00
Jordan Sissel
513df922c5
- For sanity in chaining, we should not override an event.type if we already
...
have one (for example, if we get an event over amqp, we should not override the
type).
2010-11-12 03:47:52 +00:00
Jordan Sissel
16ad0f80f7
- log grokpile stuff
2010-11-11 09:03:01 +00:00
Jordan Sissel
1213d77d94
forgot to check this in (fixes queue naming)
2010-11-11 09:02:35 +00:00
Jordan Sissel
75910bb656
- unify input/output for amqp. This fixes a bug where we amqp:///topic/foo
...
would register a topic as "/topic/foo" for outputs but "foo" for inputs.
2010-11-11 08:20:13 +00:00
Jordan Sissel
7f4b1192f8
- Add output amqp logging
2010-11-11 08:15:28 +00:00
Jordan Sissel
253df23b57
- Add input logging
2010-11-11 08:13:04 +00:00
Jordan Sissel
3c9c38e55e
- add proper setters
2010-11-11 08:06:03 +00:00
Jordan Sissel
fa9686832c
- update gemspec
2010-11-11 07:39:22 +00:00
Jordan Sissel
add9eb66cd
remove ap
2010-11-11 07:38:10 +00:00
Jordan Sissel
dd93817f07
- remove 'ap'
2010-11-11 07:37:58 +00:00
Jordan Sissel
f440e22664
2010-11-11 07:37:48 +00:00
Jordan Sissel
1a2ca3fc28
- Add some nagios patterns
2010-11-11 07:37:07 +00:00
Jordan Sissel
7f38743da4
- Add grokdiscovery example
2010-11-09 10:22:40 +00:00
Jordan Sissel
65a115fee6
- Add support for iso8601 timestamps in syslog messages
2010-11-09 10:22:25 +00:00
Jordan Sissel
955773f4ff
- make grokdiscovery work
2010-11-09 10:19:38 +00:00
Jordan Sissel
ca568c0437
- Add grokdiscovery
2010-11-09 10:11:28 +00:00
Jordan Sissel
37488a44fc
- use DateTime.parse to ensure any ISO8601 format dates rae in our common
...
format. This may not be necessary in the long run.
2010-11-09 09:58:28 +00:00
Jordan Sissel
5a8a350ef3
- Degrade-without-dying if we don't have awesome_print
2010-11-09 09:50:29 +00:00
Jordan Sissel
a579aea186
- Allow easy specification of ISO8601 format
2010-11-09 09:49:55 +00:00
Jordan Sissel
2953457843
- Add all patterns found
2010-11-09 09:27:57 +00:00
Pete Fritchman
ec2ae60d83
add support for streaming logs to elasticsearch via a "rabbitmq river".
...
we have to PUT a json config to the elasticsearch HTTP API to tell it
where to look, then we use our amqp output to send bulk-data style
index messages to elasticsearch. The ES side does bulk-queueing for us.
2010-11-01 01:46:20 +00:00
Pete Fritchman
b250a0218c
move CGI include around to proper place
2010-11-01 01:40:29 +00:00
Pete Fritchman
84ef233bca
- parse query string on output URLs for additional options
...
- amqp now properly supports "queue" type (and in general, works now)
- amqp supports durable queues (?durable=1)
- added amqp#receive_raw for publishing a string directly
2010-11-01 01:35:52 +00:00
Pete Fritchman
3014715d78
automatically include the right lib dir
2010-11-01 01:31:15 +00:00
Jordan Sissel
57f480adeb
- Make TZ in DATESTAMP_OTHER optional
...
- Add more debugging to filters/grok to make it easier to see pattern compile problems.
- Add percentage progress to rate.sh (for tracking long imports on logstash)
- Add content-type to the webserver
- Update to web interface to use new @-prefixed notation (@message, etc)
2010-10-31 08:59:28 +00:00
Jordan Sissel
b3e67888a1
2010-10-31 08:52:41 +00:00
Jordan Sissel
8ef912a624
- Only push events to websockets when we have subscribers
2010-10-31 08:28:55 +00:00
Jordan Sissel
97d71ed130
- Add script to hackily check for progress on a long import.
2010-10-31 08:17:47 +00:00
Pete Fritchman
8462bd05fa
introduce log types, in addition to tags
2010-10-31 06:01:46 +00:00
Pete Fritchman
7e80e89c39
show usage when we encouner option-related problems
2010-10-31 04:54:25 +00:00
Pete Fritchman
8d6419e191
s/throw/raise/
2010-10-31 04:50:19 +00:00
Pete Fritchman
f7ad0a0a9a
create base classes for inputs/outputs/filters
2010-10-31 04:46:12 +00:00
Jordan Sissel
2aba74e2f4
- metadata uses '@' prefix notation. (@timestamp, @source, etc)
2010-10-31 02:22:12 +00:00
Jordan Sissel
0de9b9d9c3
- redirect / => /search
...
- clean up sass deprecated warnings
- add note about clicking on results
2010-10-29 16:18:49 +00:00
Jordan Sissel
4b9d940341
- Escpae results
2010-10-29 16:17:28 +00:00
Jordan Sissel
73714d66d6
- Add javascript I forgot earlier.
2010-10-28 19:48:24 +00:00
Jordan Sissel
d2f8cadc50
- add Logger support
2010-10-28 19:05:14 +00:00
Jordan Sissel
2ac9f69c55
- Update to work with latest code
2010-10-28 11:00:27 +00:00
Jordan Sissel
2053ceabcb
- revert :port addition
2010-10-28 10:59:08 +00:00