Contents

# encoding: utf-8
require "logstash/filters/base"
require "logstash/namespace"

# Execute ruby code.
#
# For example, to cancel 90% of events, you can do this:
# [source,ruby]
#     filter {
#       ruby {
#         # Cancel 90% of events
#         code => "event.cancel if rand <= 0.90"
#       } 
#     } 
#
class LogStash::Filters::Ruby < LogStash::Filters::Base
  config_name "ruby"

  # Any code to execute at logstash startup-time
  config :init, :validate => :string

  # The code to execute for every event.
  # You will have an `event` variable available that is the event itself.
  config :code, :validate => :string, :required => true

  public
  def register
    # TODO(sissel): Compile the ruby code
    eval(@init, binding, "(ruby filter init)") if @init
    eval("@codeblock = lambda { |event| #{@code} }", binding, "(ruby filter code)")
  end # def register

  public
  def filter(event)
    

    begin
      @codeblock.call(event)
      filter_matched(event)
    rescue Exception => e
      @logger.error("Ruby exception occurred: #{e}")
      event.tag("_rubyexception")
    end
  end # def filter
end # class LogStash::Filters::Ruby

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
logstash-filter-ruby-2.0.2	lib/logstash/filters/ruby.rb
logstash-filter-ruby-2.0.1	lib/logstash/filters/ruby.rb