Gecko [ goons4good.org ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2022-10-11 05:09
__init__.py	3.62 KB	-rw-r--r--	2022-05-16 09:16
docker_events.py	2.84 KB	-rw-r--r--	2022-05-16 09:16
fluent.py	2.05 KB	-rw-r--r--	2022-05-16 09:16
http_logstash.py	2.84 KB	-rw-r--r--	2022-05-16 09:16
ircbot.py	10.22 KB	-rw-r--r--	2022-05-16 09:16
junos_syslog.py	13.18 KB	-rw-r--r--	2022-05-16 09:16
libvirt_events.py	21.28 KB	-rw-r--r--	2022-05-16 09:16
logentries.py	5.64 KB	-rw-r--r--	2022-05-16 09:16
logstash_engine.py	1.77 KB	-rw-r--r--	2022-05-16 09:16
napalm_syslog.py	11.59 KB	-rw-r--r--	2022-05-16 09:16
reactor.py	720 B	-rw-r--r--	2022-05-16 09:16
redis_sentinel.py	2.88 KB	-rw-r--r--	2022-05-16 09:16
script.py	3.33 KB	-rw-r--r--	2022-05-16 09:16
slack.py	35.79 KB	-rw-r--r--	2022-05-16 09:16
sqs_events.py	4.65 KB	-rw-r--r--	2022-05-16 09:16
stalekey.py	3.67 KB	-rw-r--r--	2022-05-16 09:16
test.py	932 B	-rw-r--r--	2022-05-16 09:16
thorium.py	314 B	-rw-r--r--	2022-05-16 09:16
webhook.py	2.78 KB	-rw-r--r--	2022-05-16 09:16

Rename

"""
HTTP Logstash engine
==========================

An engine that reads messages from the salt event bus and pushes
them onto a logstash endpoint via HTTP requests.

.. versionchanged:: 2018.3.0

.. note::
    By default, this engine take everything from the Salt bus and exports into
    Logstash.
    For a better selection of the events that you want to publish, you can use
    the ``tags`` and ``funs`` options.

:configuration: Example configuration

.. code-block:: yaml

engines:
          - http_logstash:
              url: http://blabla.com/salt-stuff
              tags:
                  - salt/job/*/new
                  - salt/job/*/ret/*
              funs:
                  - probes.results
                  - bgp.config
"""

import fnmatch

import salt.utils.event
import salt.utils.http
import salt.utils.json

_HEADERS = {"Content-Type": "application/json"}

def _logstash(url, data):
    """
    Issues HTTP queries to the logstash server.
    """
    result = salt.utils.http.query(
        url,
        "POST",
        header_dict=_HEADERS,
        data=salt.utils.json.dumps(data),
        decode=True,
        status=True,
        opts=__opts__,
    )
    return result

def start(url, funs=None, tags=None):
    """
    Listen to salt events and forward them to logstash.

url
        The Logstash endpoint.

funs: ``None``
        A list of functions to be compared against, looking into the ``fun``
        field from the event data. This option helps to select the events
        generated by one or more functions.
        If an event does not have the ``fun`` field in the data section, it
        will be published. For a better selection, consider using the ``tags``
        option.
        By default, this option accepts any event to be submitted to Logstash.

tags: ``None``
        A list of pattern to compare the event tag against.
        By default, this option accepts any event to be submitted to Logstash.
    """
    if __opts__.get("id").endswith("_master"):
        instance = "master"
    else:
        instance = "minion"
    with salt.utils.event.get_event(
        instance,
        sock_dir=__opts__["sock_dir"],
        transport=__opts__["transport"],
        opts=__opts__,
    ) as event_bus:
        while True:
            event = event_bus.get_event(full=True)
            if event:
                publish = True
                if tags and isinstance(tags, list):
                    found_match = False
                    for tag in tags:
                        if fnmatch.fnmatch(event["tag"], tag):
                            found_match = True
                    publish = found_match
                if funs and "fun" in event["data"]:
                    if not event["data"]["fun"] in funs:
                        publish = False
                if publish:
                    _logstash(url, event["data"])