# File lib/fluent/plugin/filter_record_transformer.rb, line 43 def configure(conf) super map = {} # <record></record> directive conf.elements.select { |element| element.name == 'record' }.each do |element| element.each_pair do |k, v| element.has_key?(k) # to suppress unread configuration warning map[k] = parse_value(v) end end if @remove_keys @remove_keys = @remove_keys.split(',') end if @keep_keys raise Fluent::ConfigError, "`renew_record` must be true to use `keep_keys`" unless @renew_record @keep_keys = @keep_keys.split(',') end placeholder_expander_params = { log: log, auto_typecast: @auto_typecast, } @placeholder_expander = if @enable_ruby # require utilities which would be used in ruby placeholders require 'pathname' require 'uri' require 'cgi' RubyPlaceholderExpander.new(placeholder_expander_params) else PlaceholderExpander.new(placeholder_expander_params) end @map = @placeholder_expander.preprocess_map(map) @hostname = Socket.gethostname end
# File lib/fluent/plugin/filter_record_transformer.rb, line 83 def filter_stream(tag, es) new_es = Fluent::MultiEventStream.new tag_parts = tag.split('.') tag_prefix = tag_prefix(tag_parts) tag_suffix = tag_suffix(tag_parts) placeholder_values = { 'tag' => tag, 'tag_parts' => tag_parts, 'tag_prefix' => tag_prefix, 'tag_suffix' => tag_suffix, 'hostname' => @hostname, } last_record = nil es.each do |time, record| last_record = record # for debug log placeholder_values.merge!({ 'time' => @placeholder_expander.time_value(time), 'record' => record, }) new_record = reform(record, placeholder_values) if @renew_time_key && new_record.has_key?(@renew_time_key) time = Fluent::EventTime.from_time(Time.at(new_record[@renew_time_key].to_f)) end new_es.add(time, new_record) end new_es rescue => e log.warn "failed to reform records", error: e log.warn_backtrace log.debug "map:#{@map} record:#{last_record} placeholder_values:#{placeholder_values}" end
# File lib/fluent/plugin/filter_record_transformer.rb, line 139 def expand_placeholders(value, placeholders) if value.is_a?(String) new_value = @placeholder_expander.expand(value, placeholders) elsif value.is_a?(Hash) new_value = {} value.each_pair do |k, v| new_key = @placeholder_expander.expand(k, placeholders, true) new_value[new_key] = expand_placeholders(v, placeholders) end elsif value.is_a?(Array) new_value = [] value.each_with_index do |v, i| new_value[i] = expand_placeholders(v, placeholders) end else new_value = value end new_value end
# File lib/fluent/plugin/filter_record_transformer.rb, line 117 def parse_value(value_str) if value_str.start_with?('{', '[') JSON.parse(value_str) else value_str end rescue => e log.warn "failed to parse #{value_str} as json. Assuming #{value_str} is a string", error: e value_str # emit as string end
# File lib/fluent/plugin/filter_record_transformer.rb, line 128 def reform(record, placeholder_values) placeholders = @placeholder_expander.prepare_placeholders(placeholder_values) new_record = @renew_record ? {} : record.dup @keep_keys.each {|k| new_record[k] = record[k]} if @keep_keys and @renew_record new_record.merge!(expand_placeholders(@map, placeholders)) @remove_keys.each {|k| new_record.delete(k) } if @remove_keys new_record end
# File lib/fluent/plugin/filter_record_transformer.rb, line 159 def tag_prefix(tag_parts) return [] if tag_parts.empty? tag_prefix = [tag_parts.first] 1.upto(tag_parts.size-1).each do |i| tag_prefix[i] = "#{tag_prefix[i-1]}.#{tag_parts[i]}" end tag_prefix end
# File lib/fluent/plugin/filter_record_transformer.rb, line 168 def tag_suffix(tag_parts) return [] if tag_parts.empty? rev_tag_parts = tag_parts.reverse rev_tag_suffix = [rev_tag_parts.first] 1.upto(tag_parts.size-1).each do |i| rev_tag_suffix[i] = "#{rev_tag_parts[i]}.#{rev_tag_suffix[i-1]}" end rev_tag_suffix.reverse! end