summaryrefslogtreecommitdiff
path: root/internal/mapr/logformat/parser.go
blob: 37d7a6310b724ce7878b749bf9e1257b04fe52d1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
package logformat

import (
	"errors"
	"fmt"
	"time"

	"github.com/mimecast/dtail/internal/config"
	"github.com/mimecast/dtail/internal/mapr"
)

// ErrIgnoreFields indicates that the fields should be ignored.
var ErrIgnoreFields error = errors.New("Ignore this field set")

// Parser is used to parse the mapreduce information from the server log files.
type Parser interface {
	// MakeFields creates a field map from an input log line.
	MakeFields(string) (map[string]string, error)
}

// NewParser returns a new log parser.
func NewParser(logFormatName string, query *mapr.Query) (Parser, error) {
	hostname, err := config.Hostname()
	if err != nil {
		return nil, err
	}
	now := time.Now()
	timeZoneName, timeZoneOffset := now.Zone()

	// Extend this for adding more log formats!
	switch logFormatName {
	case "generic":
		return newGenericParser(hostname, timeZoneName, timeZoneOffset)
	case "generickv":
		return newGenericKVParser(hostname, timeZoneName, timeZoneOffset)
	case "csv":
		return newCSVParser(hostname, timeZoneName, timeZoneOffset)
	case "mimecast":
		return newMimecastParser(hostname, timeZoneName, timeZoneOffset)
	case "mimecastgeneric":
		return newMimecastGenericParser(hostname, timeZoneName, timeZoneOffset)
	case "default":
		return newDefaultParser(hostname, timeZoneName, timeZoneOffset)
	case "custom1":
		return newCustom1Parser(hostname, timeZoneName, timeZoneOffset)
	case "custom2":
		return newCustom2Parser(hostname, timeZoneName, timeZoneOffset)
	default:
		p, err := newDefaultParser(hostname, timeZoneName, timeZoneOffset)
		if err != nil {
			return p, fmt.Errorf("No '%s' mapr log format and problem creating default one: %v",
				logFormatName, err)
		}
		return p, fmt.Errorf("No '%s' mapr log format", logFormatName)
	}
}