Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $
You can buy this project and download/modify it how often you want.
org.graylog.events.event.EventImpl Maven / Gradle / Ivy
/*
* Copyright (C) 2020 Graylog, Inc.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the Server Side Public License, version 1,
* as published by MongoDB, Inc.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* Server Side Public License for more details.
*
* You should have received a copy of the Server Side Public License
* along with this program. If not, see
* .
*/
package org.graylog.events.event;
import com.codahale.metrics.Meter;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.google.common.base.MoreObjects;
import com.google.common.collect.ImmutableList;
import com.google.common.collect.ImmutableMap;
import com.google.common.collect.ImmutableSet;
import org.apache.logging.log4j.util.Strings;
import org.graylog.events.fields.FieldValue;
import org.graylog2.jackson.TypeReferences;
import org.joda.time.DateTime;
import org.joda.time.DateTimeZone;
import javax.annotation.Nonnull;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.Objects;
import java.util.stream.Collectors;
import static java.util.Objects.requireNonNull;
import static org.graylog2.plugin.Tools.buildElasticSearchTimeFormat;
import static org.joda.time.DateTimeZone.UTC;
public class EventImpl implements Event {
private final String eventId;
private final String eventDefinitionType;
private final String eventDefinitionId;
private String originContext;
private DateTime eventTimestamp;
private DateTime processingTimestamp;
private DateTime timerangeStart;
private DateTime timerangeEnd;
private ImmutableSet streams = ImmutableSet.of();
private ImmutableSet sourceStreams = ImmutableSet.of();
private String message;
private String source;
private ImmutableList keyTuple = ImmutableList.of();
private long priority;
private boolean alert;
private Map fields = new HashMap<>();
private Map groupByFields = new HashMap<>();
EventImpl(String eventId,
DateTime eventTimestamp,
String eventDefinitionType,
String eventDefinitionId,
String message,
String source,
long priority,
boolean alert) {
this.eventId = eventId;
this.eventTimestamp = eventTimestamp;
this.processingTimestamp = DateTime.now(DateTimeZone.UTC);
this.eventDefinitionType = eventDefinitionType;
this.eventDefinitionId = eventDefinitionId;
this.priority = priority;
this.alert = alert;
this.message = message;
this.source = source;
}
@Override
public String getId() {
return eventId;
}
@Override
public String getMessageId() {
return eventId;
}
@Override
public String getEventDefinitionType() {
return eventDefinitionType;
}
@Override
public String getEventDefinitionId() {
return eventDefinitionId;
}
@Override
public String getOriginContext() {
return originContext;
}
@Override
public void setOriginContext(String originContext) {
this.originContext = originContext;
}
@Override
public DateTime getEventTimestamp() {
return eventTimestamp;
}
@Override
public DateTime getReceiveTime() {
return getEventTimestamp();
}
@Override
public DateTime getTimestamp() {
return getEventTimestamp();
}
@Override
public void setEventTimestamp(DateTime eventTimestamp) {
this.eventTimestamp = eventTimestamp;
}
@Override
public DateTime getProcessingTimestamp() {
return processingTimestamp;
}
@Override
public void setProcessingTimestamp(DateTime processingTimestamp) {
this.processingTimestamp = processingTimestamp;
}
@Override
public DateTime getTimerangeStart() {
return timerangeStart;
}
@Override
public void setTimerangeStart(DateTime timerangeStart) {
this.timerangeStart = timerangeStart;
}
@Override
public DateTime getTimerangeEnd() {
return timerangeEnd;
}
@Override
public void setTimerangeEnd(DateTime timerangeEnd) {
this.timerangeEnd = timerangeEnd;
}
@Override
public ImmutableSet getStreams() {
return streams;
}
@Override
public void addStream(String stream) {
this.streams = ImmutableSet.builder()
.addAll(streams)
.add(stream)
.build();
}
@Override
public void removeStream(String stream) {
this.streams = ImmutableSet.builder()
.addAll(streams.stream().filter(s -> !s.equals(stream)).collect(Collectors.toSet()))
.build();
}
@Override
public ImmutableSet getSourceStreams() {
return sourceStreams;
}
@Override
public void addSourceStream(String sourceStream) {
this.sourceStreams = ImmutableSet.builder()
.addAll(sourceStreams)
.add(sourceStream)
.build();
}
@Override
public void removeSourceStream(String sourceStream) {
this.sourceStreams = ImmutableSet.builder()
.addAll(sourceStreams.stream().filter(s -> !s.equals(sourceStream)).collect(Collectors.toSet()))
.build();
}
@Override
public String getMessage() {
return message;
}
@Override
public void setMessage(String message) {
this.message = message;
}
@Override
public String getSource() {
return source;
}
@Override
public void setSource(String source) {
this.source = source;
}
@Override
public ImmutableList getKeyTuple() {
return keyTuple;
}
@Override
public void setKeyTuple(List keyTuple) {
this.keyTuple = ImmutableList.copyOf(keyTuple);
}
@Override
public long getPriority() {
return priority;
}
@Override
public void setPriority(long priority) {
this.priority = priority;
}
@Override
public boolean getAlert() {
return alert;
}
@Override
public void setAlert(boolean alert) {
this.alert = alert;
}
@Override
public FieldValue getField(String name) {
return fields.get(name);
}
@Override
public void setField(String name, FieldValue value) {
this.fields.put(name, value);
}
@Override
public void setFields(Map fields) {
this.fields = fields.entrySet().stream().collect(Collectors.toMap(Map.Entry::getKey, entry -> FieldValue.string(entry.getValue())));
}
@Override
public boolean hasField(String name) {
return fields.containsKey(name);
}
@Override
public Map getGroupByFields() {
return this.groupByFields.entrySet().stream().collect(Collectors.toMap(Map.Entry::getKey, e -> e.getValue().value()));
}
@Override
public void setGroupByFields(Map fields) {
this.groupByFields = fields.entrySet().stream().collect(Collectors.toMap(Map.Entry::getKey, entry -> FieldValue.string(entry.getValue())));
}
@Override
public EventDto toDto() {
final Map fields = this.fields.entrySet()
.stream()
.filter(entry -> !entry.getValue().isError())
.collect(Collectors.toMap(Map.Entry::getKey, entry -> entry.getValue().value()));
final Map groupByFields = this.groupByFields.entrySet()
.stream()
.filter(entry -> !entry.getValue().isError())
.collect(Collectors.toMap(Map.Entry::getKey, entry -> entry.getValue().value()));
return EventDto.builder()
.id(getId())
.eventDefinitionType(getEventDefinitionType())
.eventDefinitionId(getEventDefinitionId())
.originContext(getOriginContext())
.eventTimestamp(getEventTimestamp())
.processingTimestamp(getProcessingTimestamp())
.timerangeStart(getTimerangeStart())
.timerangeEnd(getTimerangeEnd())
.streams(getStreams())
.sourceStreams(getSourceStreams())
.message(getMessage())
.source(getSource())
.keyTuple(getKeyTuple())
.key(Strings.join(getKeyTuple(), '|'))
.priority(getPriority())
.alert(getAlert())
.fields(ImmutableMap.copyOf(fields))
.groupByFields(ImmutableMap.copyOf(groupByFields))
.build();
}
@Override
public Map toElasticSearchObject(ObjectMapper objectMapper, @Nonnull Meter invalidTimestampMeter) {
final Map source = objectMapper.convertValue(this.toDto(), TypeReferences.MAP_STRING_OBJECT);
// "Fix" timestamps to be in the correct format. Our message index mapping is using this format so we have
// to use it for our events as well to make sure we can use the search without errors.
source.put(EventDto.FIELD_EVENT_TIMESTAMP, buildElasticSearchTimeFormat(requireNonNull(this.getEventTimestamp()).withZone(UTC)));
source.put(EventDto.FIELD_PROCESSING_TIMESTAMP, buildElasticSearchTimeFormat(requireNonNull(this.getProcessingTimestamp()).withZone(UTC)));
if (this.getTimerangeStart() != null) {
source.put(EventDto.FIELD_TIMERANGE_START, buildElasticSearchTimeFormat(this.getTimerangeStart().withZone(UTC)));
}
if (this.getTimerangeEnd() != null) {
source.put(EventDto.FIELD_TIMERANGE_END, buildElasticSearchTimeFormat(this.getTimerangeEnd().withZone(UTC)));
}
// We cannot index events that don't have any stream set
if (this.getStreams().isEmpty()) {
throw new IllegalStateException("Event streams cannot be empty");
}
return source;
}
@Override
public boolean equals(Object o) {
if (this == o) return true;
if (o == null || getClass() != o.getClass()) return false;
EventImpl event = (EventImpl) o;
return priority == event.priority &&
alert == event.alert &&
Objects.equals(eventId, event.eventId) &&
Objects.equals(eventDefinitionType, event.eventDefinitionType) &&
Objects.equals(eventDefinitionId, event.eventDefinitionId) &&
Objects.equals(originContext, event.originContext) &&
Objects.equals(eventTimestamp, event.eventTimestamp) &&
Objects.equals(processingTimestamp, event.processingTimestamp) &&
Objects.equals(timerangeStart, event.timerangeStart) &&
Objects.equals(timerangeEnd, event.timerangeEnd) &&
Objects.equals(streams, event.streams) &&
Objects.equals(sourceStreams, event.sourceStreams) &&
Objects.equals(message, event.message) &&
Objects.equals(source, event.source) &&
Objects.equals(keyTuple, event.keyTuple) &&
Objects.equals(fields, event.fields) &&
Objects.equals(groupByFields, event.groupByFields);
}
@Override
public int hashCode() {
return Objects.hash(eventId, eventDefinitionType, eventDefinitionId, originContext, eventTimestamp,
processingTimestamp, timerangeStart, timerangeEnd, streams, sourceStreams, message, source,
keyTuple, priority, alert, fields, groupByFields);
}
@Override
public String toString() {
return MoreObjects.toStringHelper(this)
.add("eventId", eventId)
.add("eventDefinitionType", eventDefinitionType)
.add("eventDefinitionId", eventDefinitionId)
.add("originContext", originContext)
.add("eventTimestamp", eventTimestamp)
.add("processingTimestamp", processingTimestamp)
.add("timerangeStart", timerangeStart)
.add("timerangeEnd", timerangeEnd)
.add("streams", streams)
.add("sourceStreams", sourceStreams)
.add("message", message)
.add("source", source)
.add("keyTuple", keyTuple)
.add("priority", priority)
.add("alert", alert)
.add("fields", fields)
.add("groupByFields", groupByFields)
.toString();
}
@Override
public long getSize() {
return 0;
}
}
