elastic/logstash

URL / URI filter would be very handy

Open

Aperta il 7 feb 2015

Vedi su GitHub
 (2 commenti) (4 reazioni) (0 assegnatari)Ruby (14.197 star) (3496 fork)batch import
help wantednew plugin

Descrizione

Would be awesome if URL could get parsed, same style as user agent filter. Fields to extract:

  • protocol
  • host
  • port
  • uri
  • query string
  • list of key / values for each parameters

Same applies if just URI. Since many logs include URLs, it would make visualizations on those very easy. Getting aggregations on host, uri, params would be very handy.

Guida contributor

Tech stack
ruby
Dominio
backenddata
Tipo issue
feature
DifficoltàQuanto dovrebbe essere impegnativa per un nuovo contributor.
3
Tempo stimatoTempo stimato per completare e verificare uno scope piccolo.
3-5 days
Stato attivitàQuanto è probabile che la issue sia ancora attiva e reviewable.
stale
ChiarezzaQuanto chiaramente la issue descrive problema, scope e risultato atteso.
mostly clear
Prerequisiti
Ruby programmingLogstash plugin developmentRegular expressions
Adatta ai principiantiQuanto la issue è adatta a contributor alla prima esperienza.
45
Direzione di ricerca
Examine the existing user agent filter in the Logstash codebase (likely under lib/logstash/filters/) to understand the structure. Review the two comments in the issue for additional context. Study the Logstash plugin development guide (https://www.elastic.co/guide/en/logstash/current/plugin doc.html). Implement a new filter that parses URLs/URIs using Ruby's URI module or regex, extracting the specified fields.