yo/graylog-plugin-getlistvaluebyregex

Fork 0

A function plugin for graylog, to match regexes in string list. Only matching strings will be returned as list. Use it in pipelines.

Go to file

yo c7af8bd960 First commit		2024-02-20 19:50:45 +01:00
src	First commit	2024-02-20 19:50:45 +01:00
.gitignore	First commit	2024-02-20 19:50:45 +01:00
build.config.js	First commit	2024-02-20 19:50:45 +01:00
package.json	First commit	2024-02-20 19:50:45 +01:00
pom.xml	First commit	2024-02-20 19:50:45 +01:00
README.md	First commit	2024-02-20 19:50:45 +01:00
webpack.config.js	First commit	2024-02-20 19:50:45 +01:00

README.md

GetListValueByRegex Plugin for Graylog

Provide pipeline function get_list_val_by_regex which filter a list by regex. Matching strings in list will be returned as a list.

Required Graylog version: 5.2.0 and later

Installation

Download the plugin and place the .jar file in your Graylog plugin directory. The plugin directory is the plugins/ folder relative from your graylog-server directory by default and can be configured in your graylog.conf file.

Restart graylog-server and you are done.

Development

You can improve your development experience for the web interface part of your plugin dramatically by making use of hot reloading. To do this, do the following:

git clone https://github.com/Graylog2/graylog2-server.git
cd graylog2-server/graylog2-web-interface
ln -s $YOURPLUGIN plugin/
npm install && npm start

Usage

Put in graylo gplugin directory, use it in pipeline rules.

Getting started

This project is using Maven 3 and requires Java 17 or higher.

Clone this repository.
Run mvn package to build a JAR file.
Optional: Run mvn jdeb:jdeb and mvn rpm:rpm to create a DEB and RPM package respectively.
Copy generated JAR file in target directory to your Graylog plugin directory.
Restart the Graylog.

Plugin Release

We are using the maven release plugin:

$ mvn release:prepare
[...]
$ mvn release:perform