| -- Copyright 2015 Mirantis, Inc. |
| -- |
| -- Licensed under the Apache License, Version 2.0 (the "License"); |
| -- you may not use this file except in compliance with the License. |
| -- You may obtain a copy of the License at |
| -- |
| -- http://www.apache.org/licenses/LICENSE-2.0 |
| -- |
| -- Unless required by applicable law or agreed to in writing, software |
| -- distributed under the License is distributed on an "AS IS" BASIS, |
| -- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| -- See the License for the specific language governing permissions and |
| -- limitations under the License. |
| require "string" |
| local l = require 'lpeg' |
| l.locale(l) |
| |
| local syslog = require "syslog" |
| local patt = require 'patterns' |
| local utils = require 'lma_utils' |
| |
| local msg = { |
| Timestamp = nil, |
| Type = 'log', |
| Hostname = nil, |
| Payload = nil, |
| Pid = nil, |
| Fields = nil, |
| Severity = nil, |
| } |
| |
| local syslog_pattern = read_config("syslog_pattern") or error("syslog_pattern configuration must be specified") |
| |
| local sp = l.space |
| local colon = l.P":" |
| |
| local syslog_grammar = syslog.build_rsyslog_grammar(syslog_pattern) |
| |
| -- mysqld logs are cranky,the date is YYMMMDD, the hours have no leading zero and the "real" severity level is enclosed by square brackets... |
| local mysql_grammar = l.Ct(l.digit^-6 * sp^1 * l.digit^-2 * colon * l.digit^-2 * colon * l.digit^-2 * sp^1 * l.P"[" * l.Cg(l.R("az", "AZ")^0 / string.upper, "SeverityLabel") * l.P"]" * sp^1 * l.Cg(patt.Message, "Message")) |
| |
| |
| function process_message () |
| local log = read_message("Payload") |
| |
| if not utils.parse_syslog_message(syslog_grammar, log, msg) then |
| return -1 |
| end |
| |
| local m = mysql_grammar:match(msg.Payload) |
| if m then |
| msg.Fields.severity_label = m.SeverityLabel |
| msg.Payload = m.Message |
| end |
| |
| return utils.safe_inject_message(msg) |
| end |