parser

Documentation

Index

• type JSONParser
  • func (j *JSONParser) Process(ctx context.Context, entry *entry.Entry) error
• type JSONParserConfig
  • func NewJSONParserConfig(operatorID string) *JSONParserConfig
  • func (c JSONParserConfig) Build(context operator.BuildContext) (operator.Operator, error)
• type RegexParser
  • func (r *RegexParser) Process(ctx context.Context, entry *entry.Entry) error
• type RegexParserConfig
  • func NewRegexParserConfig(operatorID string) *RegexParserConfig
  • func (c RegexParserConfig) Build(context operator.BuildContext) (operator.Operator, error)
• type SeverityParserConfig
  • func NewSeverityParserConfig(operatorID string) *SeverityParserConfig
  • func (c SeverityParserConfig) Build(context operator.BuildContext) (operator.Operator, error)
• type SeverityParserOperator
  • func (p *SeverityParserOperator) Process(ctx context.Context, entry *entry.Entry) error
• type SyslogParser
  • func (s *SyslogParser) Process(ctx context.Context, entry *entry.Entry) error
• type SyslogParserConfig
  • func NewSyslogParserConfig(operatorID string) *SyslogParserConfig
  • func (c SyslogParserConfig) Build(context operator.BuildContext) (operator.Operator, error)
• type TimeParserConfig
  • func NewTimeParserConfig(operatorID string) *TimeParserConfig
  • func (c TimeParserConfig) Build(context operator.BuildContext) (operator.Operator, error)
• type TimeParserOperator
  • func (t *TimeParserOperator) CanOutput() bool
  • func (t *TimeParserOperator) Process(ctx context.Context, entry *entry.Entry) error

Types

type JSONParser

type JSONParser struct {
	helper.ParserOperator
	// contains filtered or unexported fields
}

JSONParser is an operator that parses JSON.

func (*JSONParser) Process

func (j *JSONParser) Process(ctx context.Context, entry *entry.Entry) error

Process will parse an entry for JSON.

type JSONParserConfig

type JSONParserConfig struct {
	helper.ParserConfig `yaml:",inline"`
}

JSONParserConfig is the configuration of a JSON parser operator.

func NewJSONParserConfig

func NewJSONParserConfig(operatorID string) *JSONParserConfig

func (JSONParserConfig) Build

func (c JSONParserConfig) Build(context operator.BuildContext) (operator.Operator, error)

Build will build a JSON parser operator.

type RegexParser

type RegexParser struct {
	helper.ParserOperator
	// contains filtered or unexported fields
}

RegexParser is an operator that parses regex in an entry.

func (*RegexParser) Process

func (r *RegexParser) Process(ctx context.Context, entry *entry.Entry) error

Process will parse an entry for regex.

type RegexParserConfig

type RegexParserConfig struct {
	helper.ParserConfig `yaml:",inline"`

	Regex string `json:"regex" yaml:"regex"`
}

RegexParserConfig is the configuration of a regex parser operator.

func NewRegexParserConfig

func NewRegexParserConfig(operatorID string) *RegexParserConfig

func (RegexParserConfig) Build

func (c RegexParserConfig) Build(context operator.BuildContext) (operator.Operator, error)

Build will build a regex parser operator.

type SeverityParserConfig

type SeverityParserConfig struct {
	helper.TransformerConfig    `yaml:",inline"`
	helper.SeverityParserConfig `yaml:",omitempty,inline"`
}

SeverityParserConfig is the configuration of a severity parser operator.

func NewSeverityParserConfig

func NewSeverityParserConfig(operatorID string) *SeverityParserConfig

func (SeverityParserConfig) Build

func (c SeverityParserConfig) Build(context operator.BuildContext) (operator.Operator, error)

Build will build a time parser operator.

type SeverityParserOperator

type SeverityParserOperator struct {
	helper.TransformerOperator
	helper.SeverityParser
}

SeverityParserOperator is an operator that parses time from a field to an entry.

func (*SeverityParserOperator) Process

func (p *SeverityParserOperator) Process(ctx context.Context, entry *entry.Entry) error

Process will parse time from an entry.

type SyslogParser

type SyslogParser struct {
	helper.ParserOperator
	// contains filtered or unexported fields
}

SyslogParser is an operator that parses syslog.

func (*SyslogParser) Process

func (s *SyslogParser) Process(ctx context.Context, entry *entry.Entry) error

Process will parse an entry field as syslog.

type SyslogParserConfig

type SyslogParserConfig struct {
	helper.ParserConfig `yaml:",inline"`

	Protocol string `json:"protocol,omitempty" yaml:"protocol,omitempty"`
}

SyslogParserConfig is the configuration of a syslog parser operator.

func NewSyslogParserConfig

func NewSyslogParserConfig(operatorID string) *SyslogParserConfig

func (SyslogParserConfig) Build

func (c SyslogParserConfig) Build(context operator.BuildContext) (operator.Operator, error)

Build will build a JSON parser operator.

type TimeParserConfig

type TimeParserConfig struct {
	helper.TransformerConfig `yaml:",inline"`
	helper.TimeParser        `yaml:",omitempty,inline"`
}

TimeParserConfig is the configuration of a time parser operator.

func NewTimeParserConfig

func NewTimeParserConfig(operatorID string) *TimeParserConfig

func (TimeParserConfig) Build

func (c TimeParserConfig) Build(context operator.BuildContext) (operator.Operator, error)

Build will build a time parser operator.

type TimeParserOperator

type TimeParserOperator struct {
	helper.TransformerOperator
	helper.TimeParser
}

TimeParserOperator is an operator that parses time from a field to an entry.

func (*TimeParserOperator) CanOutput

func (t *TimeParserOperator) CanOutput() bool

CanOutput will always return true for a parser operator.

func (*TimeParserOperator) Process

func (t *TimeParserOperator) Process(ctx context.Context, entry *entry.Entry) error

Process will parse time from an entry.