yaauie

###############################################################################
# downcase-field-names.logstash-filter-ruby.rb
# ---------------------------------
# A script for a Logstash Ruby Filter to transform field names to all lowercase
###############################################################################
#
# Copyright 2020 Ry Biesemeyer
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal

yaauie

###############################################################################
# stringify-timestamp.logstash-filter-ruby.rb
# ---------------------------------
# A script for a Logstash Ruby Filter to stringify logstash timestamps using
# ISO-8601.
###############################################################################
#
# Copyright 2020 Ry Biesemeyer
#
# Permission is hereby granted, free of charge, to any person obtaining a copy

yaauie

filter {
  geoip {
    source => "[host][ip]"
    target => "[@metadata][host_geoip]"
  }
  if [@metadata][host_geoip] {
    mutate {
      copy => {
        "[@metadata][host_geoip][city_name]"      => "[host][geo][city_name]"
        "[@metadata][host_geoip][country_name]"   => "[host][geo][country_name]"

yaauie

###############################################################################
# tag-when-fields-over-threshold.logstash-filter-ruby.rb
# ---------------------------------
# A script for a Logstash Ruby Filter to tag an event when it has "too many"
# fields, with a configurable threshold.
###############################################################################
#
# Copyright 2020 Ry Biesemeyer
#
# Permission is hereby granted, free of charge, to any person obtaining a copy

yaauie

###############################################################################
# replace-subset.logstash-filter-ruby.rb
# ---------------------------------
# A script for a Logstash Ruby Filter to replace an event's contents with a
# subset that exists as an object in a field.
###############################################################################
#
# Copyright 2020 Ry Biesemeyer
#
# Permission is hereby granted, free of charge, to any person obtaining a copy

yaauie

###############################################################################
# delete-emtpy-nodes.logstash-filter-ruby.rb
# ---------------------------------
# A script for a Logstash Ruby Filter to delete empty nodes from an event; by
# default, crawls the entire event recursively, but it can be configured to
# limit the scope.
###############################################################################
#
# Copyright 2018 Ry Biesemeyer
#

yaauie

# The BackPressureProvider allows back-pressure to be applied to non-blocking APIs when those APIs also
# provide hooks for identifying when they _should_ block.
class BackPressureProvider
  def initialize(desc, logger)
    @desc = desc
    @logger = logger

    @mutex = Mutex.new
    @cond = ConditionVariable.new
    @back_pressure_engaged = false

yaauie

#!/usr/bin/env zsh
#
# Utility that allows you to cd into a local checkout of a Logstash Plugin's
# source code, whether or not you have previously cloned the repository.
#
# Usage:
#  cdlp <type> <qualifier>
#
# Example:
#  cdlp output elasticsearch

yaauie

filter {
  ruby {
    path => "${PWD}/processor-hostname.logstash-filter-ruby.rb"
    script_params => {
      "target" => "@processed-by"
    }
  }
}

yaauie

filter {
  # to convert an array of key/value objects into a single unordered
  # key/value map, use the included `transpose` script:
  ruby {
    path => "${PWD}/transpose.logstash-filter-ruby.rb"
    script_params => {
      source => "[proplist]"
    }
  }