/usr/share/perl5/Message/Passing/Filter/ToLogstash.pm is in libmessage-passing-perl 0.116-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 | package Message::Passing::Filter::ToLogstash;
use Moo;
use MooX::Types::MooseLike::Base qw/ ArrayRef /;
use List::MoreUtils qw/ uniq /;
use DateTime;
use Sys::Hostname::Long;
use namespace::clean -except => 'meta';
use constant HOSTNAME => hostname_long();
with 'Message::Passing::Role::Filter';
has default_tags => (
is => 'ro',
isa => ArrayRef,
default => sub { [] },
);
has add_tags => (
is => 'ro',
isa => ArrayRef,
default => sub { [] },
);
my %map = (
'__CLASS__' => [ 'perl:Class:', 'type' ],
hostname => 'source_host',
message => 'message',
filename => 'source_path',
date => 'timestamp',
type => 'type',
);
sub filter {
my ($self, $message) = @_;
if ('HASH' ne ref($message)) {
my $line = $message;
$message = {
message => $line,
hostname => HOSTNAME,
epochtime => AnyEvent->now,
type => 'generic_line',
};
}
$message = { '@fields' => { %$message } };
if (exists($message->{'@fields'}{epochtime})) {
$message->{'@timestamp'} = DateTime->from_epoch(epoch => delete($message->{'@fields'}{epochtime})) . ''
}
foreach my $k (keys %map) {
my $v = $map{$k};
$v = [ '', $v ] if !ref $v;
my ($prefix, $field) = @$v;
$field = '@' . $field;
if (exists($message->{'@fields'}{$k}) && !exists($message->{$field})) {
$message->{$field} = $prefix . delete $message->{'@fields'}{$k};
}
}
$message->{'@tags'} ||= $self->default_tags;
$message->{'@tags'} = [ uniq @{ $message->{'@tags'} }, @{ $self->add_tags } ];
$message;
}
1;
=head1 NAME
Method::Passing::Filter::ToLogstash
=head1 DESCRIPTION
This filter changes the message format to comply with LogStash.
Duplicate tags will be removed.
=head1 ATTRIBUTES
=head2 default_tags
This is the list of tags which get added to the messages' @tags field in case
none have been included already.
=head2 add_tags
This is the list of tags which get added to the messages' @tags field in all
cases.
=head1 METHODS
=head2 filter
Filter the message.
|