class Fluent::Plugin::FormatterSEKOIA

Public Instance Methods

configure(conf) click to toggle source
Calls superclass method
# File lib/fluent/plugin/formatter_sekoia.rb, line 13
def configure(conf)
  super
  @app_name_field_array = @app_name_field.split(".")
  @proc_id_field_array = @proc_id_field.split(".")
  @intake_key_array = @intake_key_field.split(".")
end
format(tag, time, record) click to toggle source
# File lib/fluent/plugin/formatter_sekoia.rb, line 20
def format(tag, time, record)
  log.debug("Record")
  log.debug(record.map { |k, v| "#{k}=#{v}" }.join('&'))

  msg = SEKOIA::Formatter.format(
    log: record['log'],
    timestamp: time,
    app_name: record.dig(*@app_name_field_array) || "-",
    proc_id: record.dig(*@proc_id_field_array) || "-",
    intake_key: record.dig(*@intake_key_array) || ""
  )

  log.debug("RFC 5424 Message")
  log.debug(msg)

  return msg + "\n" unless @rfc6587_message_size

  msg.length.to_s + ' ' + msg
end