Contents

require 'fluent/plugin/parser'
require 'fluent/time'
require 'json'
require 'sflowtool'


module Fluent
  module Plugin
    class SflowParser < Parser
      Plugin.register_parser('sflow', self)


      def parse(raw, remote_host)
        data = JSON.load(Sflowtool.parse(raw, remote_host))

        # NOTE: sFlow datagram doesn't have timestamp field, but sysUpTime only
        time = Fluent::EventTime.new(data['header']['unix_seconds_utc'])

        data['samples'].each do |sample|
          yield time, data['header'].merge(sample)
        end
      end
    end
  end
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
fluent-plugin-sflow-0.3.3	lib/fluent/plugin/parser_sflow.rb
fluent-plugin-sflow-0.3.2	lib/fluent/plugin/parser_sflow.rb
fluent-plugin-sflow-0.3.1	lib/fluent/plugin/parser_sflow.rb
fluent-plugin-sflow-0.3.0	lib/fluent/plugin/parser_sflow.rb