Create & Init Project...

app/service/ops/log-agent/processor/grok/BUILD

@@ -0,0 +1,38 @@
+package(default_visibility = ["//visibility:public"])
+
+load(
+    "@io_bazel_rules_go//go:def.bzl",
+    "go_library",
+)
+
+go_library(
+    name = "go_default_library",
+    srcs = [
+        "conf.go",
+        "grok.go",
+    ],
+    importpath = "go-common/app/service/ops/log-agent/processor/grok",
+    tags = ["automanaged"],
+    visibility = ["//visibility:public"],
+    deps = [
+        "//app/service/ops/log-agent/event:go_default_library",
+        "//app/service/ops/log-agent/pkg/flowmonitor:go_default_library",
+        "//app/service/ops/log-agent/processor:go_default_library",
+        "//vendor/github.com/BurntSushi/toml:go_default_library",
+        "//vendor/github.com/vjeantet/grok:go_default_library",
+    ],
+)
+
+filegroup(
+    name = "package-srcs",
+    srcs = glob(["**"]),
+    tags = ["automanaged"],
+    visibility = ["//visibility:private"],
+)
+
+filegroup(
+    name = "all-srcs",
+    srcs = [":package-srcs"],
+    tags = ["automanaged"],
+    visibility = ["//visibility:public"],
+)

app/service/ops/log-agent/processor/grok/conf.go

@@ -0,0 +1,30 @@
+package grok
+
+import (
+	"fmt"
+	"github.com/BurntSushi/toml"
+)
+
+type Config struct {
+	Pattern string `toml:"pattern"`
+}
+
+func (c *Config) ConfigValidate() (error) {
+	if c == nil {
+		return fmt.Errorf("config of grok can't be nil")
+	}
+
+	if c.Pattern == "" {
+		return fmt.Errorf("pattern of grok can't be nil")
+	}
+
+	return nil
+}
+
+func DecodeConfig(md toml.MetaData, primValue toml.Primitive) (c interface{}, err error) {
+	c = new(Config)
+	if err = md.PrimitiveDecode(primValue, c); err != nil {
+		return nil, err
+	}
+	return c, nil
+}

app/service/ops/log-agent/processor/grok/grok.go

@@ -0,0 +1,62 @@
+package grok
+
+import (
+	"context"
+
+	"go-common/app/service/ops/log-agent/event"
+	"go-common/app/service/ops/log-agent/processor"
+	"go-common/app/service/ops/log-agent/pkg/flowmonitor"
+
+	"github.com/vjeantet/grok"
+)
+
+type Grok struct {
+	c *Config
+	g *grok.Grok
+}
+
+func init() {
+	err := processor.Register("grok", Process)
+	if err != nil {
+		panic(err)
+	}
+}
+
+func Process(ctx context.Context, config interface{}, input <-chan *event.ProcessorEvent) (output chan *event.ProcessorEvent, err error) {
+	g := new(Grok)
+
+	if c, ok := config.(*Config); !ok {
+		panic("Error config for Grok Processor")
+	} else {
+		if err = c.ConfigValidate(); err != nil {
+			return nil, err
+		}
+		g.c = c
+	}
+
+	if g.g, err = grok.New(); err != nil {
+		return nil, err
+	}
+
+	output = make(chan *event.ProcessorEvent)
+	go func() {
+		for {
+			select {
+			case e := <-input:
+				values, err := g.g.Parse(g.c.Pattern, e.String())
+				if err != nil || len(values) == 0 {
+					flowmonitor.Fm.AddEvent(e, "log-agent.processor.grok", "WARN", "grok error")
+					e.Tags = append(e.Tags, "grok_error")
+					output <- e
+					continue
+				}
+				e.ParsedFields = values
+				output <- e
+			case <-ctx.Done():
+				return
+			}
+		}
+	}()
+
+	return output, nil
+}