59 lines
1.8 KiB
Lua
59 lines
1.8 KiB
Lua
-- Copyright 2015 Mirantis, Inc.
|
|
--
|
|
-- Licensed under the Apache License, Version 2.0 (the "License");
|
|
-- you may not use this file except in compliance with the License.
|
|
-- You may obtain a copy of the License at
|
|
--
|
|
-- http://www.apache.org/licenses/LICENSE-2.0
|
|
--
|
|
-- Unless required by applicable law or agreed to in writing, software
|
|
-- distributed under the License is distributed on an "AS IS" BASIS,
|
|
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
-- See the License for the specific language governing permissions and
|
|
-- limitations under the License.
|
|
require "string"
|
|
local l = require 'lpeg'
|
|
l.locale(l)
|
|
|
|
local syslog = require "syslog"
|
|
local patt = require 'patterns'
|
|
local utils = require 'lma_utils'
|
|
|
|
local msg = {
|
|
Timestamp = nil,
|
|
Type = 'log',
|
|
Hostname = nil,
|
|
Payload = nil,
|
|
Pid = nil,
|
|
Fields = nil,
|
|
Severity = nil,
|
|
}
|
|
|
|
local syslog_pattern = read_config("syslog_pattern") or error("syslog_pattern configuration must be specified")
|
|
|
|
local sp = l.space
|
|
local colon = l.P":"
|
|
|
|
local syslog_grammar = syslog.build_rsyslog_grammar(syslog_pattern)
|
|
|
|
-- mysqld logs are cranky,the date is YYMMMDD, the hours have no leading zero and the "real" severity level is enclosed by square brackets...
|
|
local mysql_grammar = l.Ct(l.digit^-6 * sp^1 * l.digit^-2 * colon * l.digit^-2 * colon * l.digit^-2 * sp^1 * l.P"[" * l.Cg(l.R("az", "AZ")^0 / string.upper, "SeverityLabel") * l.P"]" * sp^1 * l.Cg(patt.Message, "Message"))
|
|
|
|
|
|
function process_message ()
|
|
local log = read_message("Payload")
|
|
|
|
if not utils.parse_syslog_message(syslog_grammar, log, msg) then
|
|
return -1
|
|
end
|
|
|
|
local m = mysql_grammar:match(msg.Payload)
|
|
if m then
|
|
msg.Fields.severity_label = m.SeverityLabel
|
|
msg.Payload = m.Message
|
|
end
|
|
|
|
inject_message(msg)
|
|
return 0
|
|
end
|