org.apache.eagle.log4j.kafka.hadoop.SecurityLogKeyer.scala Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of eagle-log4jkafka

The newest version!

/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.apache.eagle.log4j.kafka.hadoop

import java.util.Properties

import org.apache.eagle.log4j.kafka.Keyer

/**
 * @since  6/26/15
 */
class SecurityLogKeyer(props:Properties) extends Keyer{
  /**
   * Uses the key to calculate a partition bucket id for routing
   * the data to the appropriate broker partition
   * @return returns a key based on the message
   */
  override def getKey(msg: String): String = SecurityLogKeyer.getKey(msg.split("\\s+"))
}

object SecurityLogKeyer{
  val FAILED:String = "failed"
  val SUCCESSFUL: String = "successful"

  def getKey(fields:Array[String]):String = {
    if (fields.length > 5) {
      if (fields(5) == SUCCESSFUL) {
        return if (fields.length > 7) AuditLogUtils.parseUser(fields(7)) else null
      }
      else if (fields(5) == FAILED) {
        return if (fields.length > 7) AuditLogUtils.parseIP(fields(7)) else null
      }
    }
    null
  }
}