All Downloads are FREE. Search and download functionalities are using the official Maven repository.

org.graylog2.indexer.messages.Messages Maven / Gradle / Ivy

There is a newer version: 6.0.6
Show newest version
/**
 * This file is part of Graylog.
 *
 * Graylog is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Graylog is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Graylog.  If not, see .
 */
package org.graylog2.indexer.messages;

import com.github.joschi.jadconfig.util.Duration;
import com.github.rholder.retry.RetryException;
import com.github.rholder.retry.Retryer;
import com.github.rholder.retry.RetryerBuilder;
import com.github.rholder.retry.WaitStrategies;
import com.google.common.base.Predicate;
import com.google.common.base.Throwables;
import com.google.common.collect.Lists;
import org.elasticsearch.ElasticsearchTimeoutException;
import org.elasticsearch.action.WriteConsistencyLevel;
import org.elasticsearch.action.admin.indices.analyze.AnalyzeRequestBuilder;
import org.elasticsearch.action.admin.indices.analyze.AnalyzeResponse;
import org.elasticsearch.action.admin.indices.analyze.AnalyzeResponse.AnalyzeToken;
import org.elasticsearch.action.bulk.BulkItemResponse;
import org.elasticsearch.action.bulk.BulkRequest;
import org.elasticsearch.action.bulk.BulkRequestBuilder;
import org.elasticsearch.action.bulk.BulkResponse;
import org.elasticsearch.action.get.GetRequest;
import org.elasticsearch.action.get.GetResponse;
import org.elasticsearch.action.index.IndexRequest;
import org.elasticsearch.client.Client;
import org.graylog2.configuration.ElasticsearchConfiguration;
import org.graylog2.indexer.Deflector;
import org.graylog2.indexer.IndexMapping;
import org.graylog2.indexer.results.ResultMessage;
import org.graylog2.plugin.Message;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.inject.Inject;
import javax.inject.Singleton;
import java.util.List;
import java.util.Map;
import java.util.concurrent.Callable;
import java.util.concurrent.ExecutionException;

import static com.google.common.base.Preconditions.checkNotNull;

@Singleton
public class Messages {
    private static final Logger LOG = LoggerFactory.getLogger(Messages.class);
    private static final Predicate ES_TIMEOUT_EXCEPTION_PREDICATE = new Predicate() {
        @Override
        public boolean apply(Throwable t) {
            return t instanceof ElasticsearchTimeoutException;
        }
    };
    private static final Duration MAX_WAIT_TIME = Duration.seconds(30L);
    private static final Retryer BULK_REQUEST_RETRYER = RetryerBuilder.newBuilder()
            .retryIfException(ES_TIMEOUT_EXCEPTION_PREDICATE)
            .withWaitStrategy(WaitStrategies.exponentialWait(MAX_WAIT_TIME.getQuantity(), MAX_WAIT_TIME.getUnit()))
            .build();

    private final Client c;
    private final String deflectorName;

    @Inject
    public Messages(Client client, ElasticsearchConfiguration configuration) {
        this.c = client;
        this.deflectorName = Deflector.buildName(configuration.getIndexPrefix());
    }

    public ResultMessage get(String messageId, String index) throws DocumentNotFoundException {
        final GetRequest request = c.prepareGet(index, IndexMapping.TYPE_MESSAGE, messageId).request();
        final GetResponse r = c.get(request).actionGet();

        if (!r.isExists()) {
            throw new DocumentNotFoundException(index, messageId);
        }

        return ResultMessage.parseFromSource(r);
    }

    public List analyze(String string, String index) {
        final AnalyzeRequestBuilder builder = c.admin().indices().prepareAnalyze(index, string);
        final AnalyzeResponse response = c.admin().indices().analyze(builder.request()).actionGet();

        final List tokens = response.getTokens();
        final List terms = Lists.newArrayListWithCapacity(tokens.size());
        for (AnalyzeToken token : tokens) {
            terms.add(token.getTerm());
        }

        return terms;
    }

    public boolean bulkIndex(final List messages) {
        return bulkIndex(deflectorName, messages);
    }

    public boolean bulkIndex(final String indexName, final List messages) {
        if (messages.isEmpty()) {
            return true;
        }

        final BulkRequestBuilder requestBuilder = c.prepareBulk().setConsistencyLevel(WriteConsistencyLevel.ONE);
        for (Message msg : messages) {
            requestBuilder.add(buildIndexRequest(indexName, msg.toElasticSearchObject(), msg.getId()));
        }

        final BulkResponse response = runBulkRequest(requestBuilder.request());

        LOG.debug("Index {}: Bulk indexed {} messages, took {} ms, failures: {}", indexName,
                response.getItems().length, response.getTookInMillis(), response.hasFailures());
        if (response.hasFailures()) {
            propagateFailure(response.getItems(), response.buildFailureMessage());
        }

        return !response.hasFailures();
    }

    private BulkResponse runBulkRequest(final BulkRequest request) {
        try {
            return c.bulk(request).actionGet();
        } catch (ElasticsearchTimeoutException timeoutException) {
            LOG.debug("Bulk indexing request timed out. Retrying.", timeoutException);
            try {
                return BULK_REQUEST_RETRYER.call(new BulkRequestCallable(c, request));
            } catch (ExecutionException | RetryException e) {
                LOG.error("Couldn't bulk index " + request.numberOfActions() + " messages.", e);
                throw Throwables.propagate(e);
            }
        }
    }

    private void propagateFailure(BulkItemResponse[] items, String errorMessage) {
        // Get all failed messages.
        long failedMessages = 0L;
        for (BulkItemResponse item : items) {
            if (item.isFailed()) {
                LOG.trace("Failed to index message: {}", item.getFailureMessage());
                failedMessages++;
            }
        }

        LOG.error("Failed to index [{}] messages. Please check the index error log in your web interface for the reason. Error: {}",
                failedMessages, errorMessage);
    }

    public IndexRequest buildIndexRequest(String index, Map source, String id) {
        source.remove(Message.FIELD_ID);

        return c.prepareIndex(index, IndexMapping.TYPE_MESSAGE, id)
                .setSource(source)
                .setConsistencyLevel(WriteConsistencyLevel.ONE)
                .request();
    }

    private static class BulkRequestCallable implements Callable {
        private final Client client;
        private final BulkRequest request;

        public BulkRequestCallable(Client client, BulkRequest request) {
            this.client = checkNotNull(client);
            this.request = checkNotNull(request);
        }

        @Override
        public BulkResponse call() throws Exception {
            return client.bulk(request).actionGet();
        }
    }
}




© 2015 - 2024 Weber Informatics LLC | Privacy Policy