Class: LogStash::Inputs::Beats::EventTransformCommon

Inherits:
Object
  • Object
show all
Defined in:
lib/logstash/inputs/beats/event_transform_common.rb

Overview

Base Transform class, expose the plugin decorate method, apply the tags and make sure we copy the beat hostname into host for backward compatibility.

Direct Known Subclasses

DecodedEventTransform, RawEventTransform

Instance Method Summary collapse

Constructor Details

#initialize(input) ⇒ EventTransformCommon

Returns a new instance of EventTransformCommon.



7
8
9
10
 
# File 'lib/logstash/inputs/beats/event_transform_common.rb', line 7

def initialize(input)
  @input = input
  @logger = input.logger
end

Instance Method Details

#codec_name ⇒ Object 



34
35
36
37
38
39
40
 
# File 'lib/logstash/inputs/beats/event_transform_common.rb', line 34

def codec_name
  @codec_name ||= if @input.codec.respond_to?(:base_codec)
                    @input.codec.base_codec.class.config_name
                  else
                    @input.codec.class.config_name
                  end
end

#copy_beat_hostname(event) ⇒ Object

Copies the beat.hostname field into the host field unless the host field is already defined



14
15
16
17
18
19
20
 
# File 'lib/logstash/inputs/beats/event_transform_common.rb', line 14

def copy_beat_hostname(event)
  host = event.get("[beat][hostname]")

  if host && event.get("host").nil?
    event.set("host", host)
  end
end

#decorate(event) ⇒ Object

This break the #decorate method visibility of the plugin base class, the method is protected and we cannot access it, but well ruby can let you do all the wrong thing.

I think the correct behavior would be to allow the plugin to return a Decorator object that we can pass to other objects, since only the plugin know the data used to decorate. This would allow a more component based workflow.



30
31
32
 
# File 'lib/logstash/inputs/beats/event_transform_common.rb', line 30

def decorate(event)
  @input.send(:decorate, event)
end

#include_codec_tag? ⇒ Boolean

Returns:

  • (Boolean) 


48
49
50
 
# File 'lib/logstash/inputs/beats/event_transform_common.rb', line 48

def include_codec_tag?
  @input.include_codec_tag
end

#transform(event) ⇒ Object 



42
43
44
45
46
 
# File 'lib/logstash/inputs/beats/event_transform_common.rb', line 42

def transform(event)
  copy_beat_hostname(event)
  decorate(event)
  event
end