Module: LogStash::Util::Decorators

Extended by:
Decorators
Included in:
Decorators
Defined in:
lib/logstash/util/decorators.rb

Overview

Decorators provides common manipulation on the event data.

Instance Method Summary collapse

Instance Method Details

#add_fields(fields, event, pluginname) ⇒ Object

fields is a hash of field => value where both ‘field` and `value` can use sprintf syntax.



15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
 
# File 'lib/logstash/util/decorators.rb', line 15

def add_fields(fields,event, pluginname)
  fields.each do |field, value|
    field = event.sprintf(field)
    value = Array(value)
    value.each do |v|
      v = event.sprintf(v)
      if event.include?(field)
        # note below that the array field needs to be updated then reassigned to the event.
        # this is important because a construct like event[field] << v will not work
        # in the current Java event implementation. see https://github.com/elastic/logstash/issues/4140
        a = Array(event[field])
        a << v
        event[field] = a
      else
        event[field] = v
      end
      @logger.debug? and @logger.debug("#{pluginname}: adding value to field", :field => field, :value => value)
    end
  end
end

#add_tags(tags, event, pluginname) ⇒ Object

tags is an array of string. sprintf syntax can be used.



37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'lib/logstash/util/decorators.rb', line 37

def add_tags(tags, event, pluginname)
  tags.each do |tag|
    tag = event.sprintf(tag)
    @logger.debug? and @logger.debug("#{pluginname}: adding tag", :tag => tag)
    # note below that the tags array field needs to be updated then reassigned to the event.
    # this is important because a construct like event["tags"] << tag will not work
    # in the current Java event implementation. see https://github.com/elastic/logstash/issues/4140
    tags = event["tags"] || []
    tags << tag
    event["tags"] = tags
  end
end