summaryrefslogtreecommitdiffstats
path: root/fluent-bit/src/multiline/flb_ml_parser.c
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-03-09 13:19:48 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-03-09 13:20:02 +0000
commit58daab21cd043e1dc37024a7f99b396788372918 (patch)
tree96771e43bb69f7c1c2b0b4f7374cb74d7866d0cb /fluent-bit/src/multiline/flb_ml_parser.c
parentReleasing debian version 1.43.2-1. (diff)
downloadnetdata-58daab21cd043e1dc37024a7f99b396788372918.tar.xz
netdata-58daab21cd043e1dc37024a7f99b396788372918.zip
Merging upstream version 1.44.3.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'fluent-bit/src/multiline/flb_ml_parser.c')
-rw-r--r--fluent-bit/src/multiline/flb_ml_parser.c347
1 files changed, 347 insertions, 0 deletions
diff --git a/fluent-bit/src/multiline/flb_ml_parser.c b/fluent-bit/src/multiline/flb_ml_parser.c
new file mode 100644
index 000000000..7aa33789d
--- /dev/null
+++ b/fluent-bit/src/multiline/flb_ml_parser.c
@@ -0,0 +1,347 @@
+/* -*- Mode: C; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
+
+/* Fluent Bit
+ * ==========
+ * Copyright (C) 2015-2022 The Fluent Bit Authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include <fluent-bit/flb_info.h>
+#include <fluent-bit/flb_log.h>
+#include <fluent-bit/multiline/flb_ml.h>
+#include <fluent-bit/multiline/flb_ml_rule.h>
+#include <fluent-bit/multiline/flb_ml_mode.h>
+#include <fluent-bit/multiline/flb_ml_group.h>
+
+int flb_ml_parser_init(struct flb_ml_parser *ml_parser)
+{
+ int ret;
+
+ ret = flb_ml_rule_init(ml_parser);
+ if (ret == -1) {
+ return -1;
+ }
+
+ return 0;
+}
+
+/* Create built-in multiline parsers */
+int flb_ml_parser_builtin_create(struct flb_config *config)
+{
+ struct flb_ml_parser *mlp;
+
+ /* Docker */
+ mlp = flb_ml_parser_docker(config);
+ if (!mlp) {
+ flb_error("[multiline] could not init 'docker' built-in parser");
+ return -1;
+ }
+
+ /* CRI */
+ mlp = flb_ml_parser_cri(config);
+ if (!mlp) {
+ flb_error("[multiline] could not init 'cri' built-in parser");
+ return -1;
+ }
+
+ /* Java */
+ mlp = flb_ml_parser_java(config, NULL);
+ if (!mlp) {
+ flb_error("[multiline] could not init 'java' built-in parser");
+ return -1;
+ }
+
+ /* Go */
+ mlp = flb_ml_parser_go(config, NULL);
+ if (!mlp) {
+ flb_error("[multiline] could not init 'go' built-in parser");
+ return -1;
+ }
+
+ /* Ruby */
+ mlp = flb_ml_parser_ruby(config, NULL);
+ if (!mlp) {
+ flb_error("[multiline] could not init 'ruby' built-in parser");
+ return -1;
+ }
+
+ /* Python */
+ mlp = flb_ml_parser_python(config, NULL);
+ if (!mlp) {
+ flb_error("[multiline] could not init 'python' built-in parser");
+ return -1;
+ }
+
+ return 0;
+}
+
+struct flb_ml_parser *flb_ml_parser_create(struct flb_config *ctx,
+ char *name,
+ int type, char *match_str, int negate,
+ int flush_ms,
+ char *key_content,
+ char *key_group,
+ char *key_pattern,
+ struct flb_parser *parser_ctx,
+ char *parser_name)
+{
+ struct flb_ml_parser *ml_parser;
+
+ ml_parser = flb_calloc(1, sizeof(struct flb_ml_parser));
+ if (!ml_parser) {
+ flb_errno();
+ return NULL;
+ }
+ ml_parser->name = flb_sds_create(name);
+ ml_parser->type = type;
+
+ if (match_str) {
+ ml_parser->match_str = flb_sds_create(match_str);
+ if (!ml_parser->match_str) {
+ if (ml_parser->name) {
+ flb_sds_destroy(ml_parser->name);
+ }
+ flb_free(ml_parser);
+ return NULL;
+ }
+ }
+
+ ml_parser->parser = parser_ctx;
+
+ if (parser_name) {
+ ml_parser->parser_name = flb_sds_create(parser_name);
+ }
+ ml_parser->negate = negate;
+ ml_parser->flush_ms = flush_ms;
+ mk_list_init(&ml_parser->regex_rules);
+ mk_list_add(&ml_parser->_head, &ctx->multiline_parsers);
+
+ if (key_content) {
+ ml_parser->key_content = flb_sds_create(key_content);
+ if (!ml_parser->key_content) {
+ flb_ml_parser_destroy(ml_parser);
+ return NULL;
+ }
+ }
+
+ if (key_group) {
+ ml_parser->key_group = flb_sds_create(key_group);
+ if (!ml_parser->key_group) {
+ flb_ml_parser_destroy(ml_parser);
+ return NULL;
+ }
+ }
+
+ if (key_pattern) {
+ ml_parser->key_pattern = flb_sds_create(key_pattern);
+ if (!ml_parser->key_pattern) {
+ flb_ml_parser_destroy(ml_parser);
+ return NULL;
+ }
+ }
+
+ return ml_parser;
+}
+
+struct flb_ml_parser *flb_ml_parser_get(struct flb_config *ctx, char *name)
+{
+ struct mk_list *head;
+ struct flb_ml_parser *ml_parser;
+
+ mk_list_foreach(head, &ctx->multiline_parsers) {
+ ml_parser = mk_list_entry(head, struct flb_ml_parser, _head);
+ if (strcasecmp(ml_parser->name, name) == 0) {
+ return ml_parser;
+ }
+ }
+
+ return NULL;
+}
+
+int flb_ml_parser_instance_has_data(struct flb_ml_parser_ins *ins)
+{
+ struct mk_list *head;
+ struct mk_list *head_group;
+ struct flb_ml_stream *st;
+ struct flb_ml_stream_group *st_group;
+
+ mk_list_foreach(head, &ins->streams) {
+ st = mk_list_entry(head, struct flb_ml_stream, _head);
+ mk_list_foreach(head_group, &st->groups) {
+ st_group = mk_list_entry(head_group, struct flb_ml_stream_group, _head);
+ if (st_group->mp_sbuf.size > 0) {
+ return FLB_TRUE;
+ }
+ }
+ }
+
+ return FLB_FALSE;
+}
+
+struct flb_ml_parser_ins *flb_ml_parser_instance_create(struct flb_ml *ml,
+ char *name)
+{
+ int ret;
+ struct flb_ml_parser_ins *ins;
+ struct flb_ml_parser *parser;
+
+ parser = flb_ml_parser_get(ml->config, name);
+ if (!parser) {
+ flb_error("[multiline] parser '%s' not registered", name);
+ return NULL;
+ }
+
+ ins = flb_calloc(1, sizeof(struct flb_ml_parser_ins));
+ if (!ins) {
+ flb_errno();
+ return NULL;
+ }
+ ins->last_stream_id = 0;
+ ins->ml_parser = parser;
+ mk_list_init(&ins->streams);
+
+ /* Copy parent configuration */
+ if (parser->key_content) {
+ ins->key_content = flb_sds_create(parser->key_content);
+ }
+ if (parser->key_pattern) {
+ ins->key_pattern = flb_sds_create(parser->key_pattern);
+ }
+ if (parser->key_group) {
+ ins->key_group = flb_sds_create(parser->key_group);
+ }
+
+ /* Append this multiline parser instance to the active multiline group */
+ ret = flb_ml_group_add_parser(ml, ins);
+ if (ret != 0) {
+ flb_error("[multiline] could not register parser '%s' on "
+ "multiline '%s 'group", name, ml->name);
+ flb_free(ins);
+ return NULL;
+ }
+
+ /*
+ * Update flush_interval for pending records on multiline context. We always
+ * use the greater value found.
+ */
+ if (parser->flush_ms > ml->flush_ms) {
+ ml->flush_ms = parser->flush_ms;
+ }
+
+ return ins;
+}
+
+/* Override a fixed parser property for the instance only*/
+int flb_ml_parser_instance_set(struct flb_ml_parser_ins *p, char *prop, char *val)
+{
+ if (strcasecmp(prop, "key_content") == 0) {
+ if (p->key_content) {
+ flb_sds_destroy(p->key_content);
+ }
+ p->key_content = flb_sds_create(val);
+ }
+ else if (strcasecmp(prop, "key_pattern") == 0) {
+ if (p->key_pattern) {
+ flb_sds_destroy(p->key_pattern);
+ }
+ p->key_pattern = flb_sds_create(val);
+ }
+ else if (strcasecmp(prop, "key_group") == 0) {
+ if (p->key_group) {
+ flb_sds_destroy(p->key_group);
+ }
+ p->key_group = flb_sds_create(val);
+ }
+ else {
+ return -1;
+ }
+
+ return 0;
+}
+
+int flb_ml_parser_destroy(struct flb_ml_parser *ml_parser)
+{
+ if (!ml_parser) {
+ return 0;
+ }
+
+ if (ml_parser->name) {
+ flb_sds_destroy(ml_parser->name);
+ }
+
+ if (ml_parser->parser_name) {
+ flb_sds_destroy(ml_parser->parser_name);
+ }
+
+ if (ml_parser->match_str) {
+ flb_sds_destroy(ml_parser->match_str);
+ }
+ if (ml_parser->key_content) {
+ flb_sds_destroy(ml_parser->key_content);
+ }
+ if (ml_parser->key_group) {
+ flb_sds_destroy(ml_parser->key_group);
+ }
+ if (ml_parser->key_pattern) {
+ flb_sds_destroy(ml_parser->key_pattern);
+ }
+
+ /* Regex rules */
+ flb_ml_rule_destroy_all(ml_parser);
+
+ /* Unlink from struct flb_config->multiline_parsers */
+ mk_list_del(&ml_parser->_head);
+
+ flb_free(ml_parser);
+ return 0;
+}
+
+int flb_ml_parser_instance_destroy(struct flb_ml_parser_ins *ins)
+{
+ struct mk_list *tmp;
+ struct mk_list *head;
+ struct flb_ml_stream *stream;
+
+ /* Destroy streams */
+ mk_list_foreach_safe(head, tmp, &ins->streams) {
+ stream = mk_list_entry(head, struct flb_ml_stream, _head);
+ flb_ml_stream_destroy(stream);
+ }
+
+ if (ins->key_content) {
+ flb_sds_destroy(ins->key_content);
+ }
+ if (ins->key_pattern) {
+ flb_sds_destroy(ins->key_pattern);
+ }
+ if (ins->key_group) {
+ flb_sds_destroy(ins->key_group);
+ }
+
+ flb_free(ins);
+
+ return 0;
+}
+
+void flb_ml_parser_destroy_all(struct mk_list *list)
+{
+ struct mk_list *tmp;
+ struct mk_list *head;
+ struct flb_ml_parser *parser;
+
+ mk_list_foreach_safe(head, tmp, list) {
+ parser = mk_list_entry(head, struct flb_ml_parser, _head);
+ flb_ml_parser_destroy(parser);
+ }
+}