join

Documentation

Index

• type Config
• type Plugin
  • func (p *Plugin) Do(event *pipeline.Event) pipeline.ActionResult
  • func (p *Plugin) Start(config pipeline.AnyConfig, params *pipeline.ActionPluginParams)
  • func (p *Plugin) Stop()

Types

type Config

type Config struct {
	// > @3@4@5@6
	// >
	// > The event field which will be checked for joining with each other.
	Field  cfg.FieldSelector `json:"field" required:"true" parse:"selector"` // *
	Field_ []string

	// > @3@4@5@6
	// >
	// > A regexp which will start the join sequence.
	Start  cfg.Regexp `json:"start" required:"true" parse:"regexp"` // *
	Start_ *regexp.Regexp

	// > @3@4@5@6
	// >
	// > A regexp which will continue the join sequence.
	Continue  cfg.Regexp `json:"continue" required:"true" parse:"regexp"` // *
	Continue_ *regexp.Regexp

	// > @3@4@5@6
	// >
	// > Max size of the resulted event. If it is set and the event exceeds the limit, the event will be truncated.
	MaxEventSize int `json:"max_event_size" default:"0"` // *

	// > @3@4@5@6
	// >
	// > Negate match logic for Continue (lets you implement negative lookahead while joining lines)
	Negate bool `json:"negate" default:"false"` // *
}

! config-params ^ config-params

type Plugin

type Plugin struct {
	// contains filtered or unexported fields
}

func (*Plugin) Do

func (p *Plugin) Do(event *pipeline.Event) pipeline.ActionResult

func (*Plugin) Start

func (p *Plugin) Start(config pipeline.AnyConfig, params *pipeline.ActionPluginParams)

func (*Plugin) Stop

func (p *Plugin) Stop()