lumbermill.Grok Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of lumbermill-core Show documentation

Where Logs are cut into Lumber

There is a newer version: 0.0.26

package lumbermill;

import lumbermill.api.Event;
import lumbermill.api.JsonEvent;
import lumbermill.internal.MapWrap;
import lumbermill.internal.transformers.GrokFactory;
import rx.Observable;
import rx.functions.Func1;

import java.util.List;
import java.util.Map;

class Grok {

    /**
     * Extracts values from a string and adds those as key/value pairs
     *
     *  Groovy usage:
     *  {@code
     * parse (
     *     field : 'message',
     *     pattern : 'AWS_ELB_LOG',
     *     tagOnFailure : false
     * )
     * }
     */
    public Func1> parse (Map conf) {
        MapWrap mapWrap = MapWrap.of(conf).assertExists("field", "pattern");
        lumbermill.internal.transformers.Grok grok = GrokFactory.create(mapWrap.asString("field"),
                mapWrap.asString("pattern"),
                mapWrap.get("tagOnFailure", true),
                mapWrap.get("tag", GrokFactory.ERROR_TAG));

        return t -> grok.parse(t);
    }

    public Func1, Observable>> parseBuffer(Map parameters) {
        MapWrap mapWrap = MapWrap.of(parameters).assertExists("field", "pattern");
        lumbermill.internal.transformers.Grok grok = GrokFactory.create(mapWrap.asString("field"),
                mapWrap.asString("pattern"),
                mapWrap.get("tagOnFailure", true),
                mapWrap.get("tag", GrokFactory.ERROR_TAG));
        return events -> grok.parse(events);
    }
}